13 ago
|
Willis Towers Watson
|
Madrid
13 ago
Willis Towers Watson
Madrid
Description
The Threat-Led Detection Engineer Lead
will drive WTW’s detection engineering capability within the Global Information and Cyber Security Defence (ICSD) function, owning the strategy, quality, and continuous improvement of how WTW detects threats across its global estate in AI era. This role blends deep technical detection expertise with team leadership, driving a threat-led, intelligence-informed approach to detection that maps directly to real adversary behaviour.
The Lead will set the standard for how detections are designed, written, tested, documented, and maintained – championing Detection-as-Code, measurable detection coverage, and a strong engineering culture. Working closely with SOC, Threat Hunting, Cyber Threat Intelligence (CTI), Incident Response, and Vulnerability Management teams, the Lead will ensure WTW’s detection library evolves ahead of the threat landscape.
The individual will work as part of a global, multi-disciplined security community with strong support across the business,
helping to foster a security-aware culture while ensuring WTW remains a great place to work. With WTW’s large global footprint, this role offers a fascinating range of work, and occasional general travel may be required.
The Threat-Led Detection Engineer Lead will grow WTW’s detection engineering function within the General Cyber Security Defence team. Responsibilities of this role will include:
Drive WTW’s detection engineering strategy, setting the vision, standards, and roadmap for threat-led detection across cloud, endpoint, identity, network, and SaaS environments.
Lead, mentor, and grow a team of detection engineers, establishing engineering best practices, peer review, and a culture of high-quality, well-documented detections.
Drive a threat-led detection approach, prioritising detection development against adversary tradecraft using the MITRE ATT&CK; framework, the Cyber Kill Chain, and the Diamond Model of Intrusion Analysis.
Translate Cyber Thr
📌 Threat-Led Detection Engineer (Madrid)
🏢 Willis Towers Watson
📍 Madrid