Detection Engineer

SKILLS:

· The successful candidate is expected to support CSAD's new Security Exposure and Third-Party Cyber Assurance Centre of Excellence during its build phase.

· The role provides the hands-on technical and operational backbone across two tracks- Security Exposure Management (SEM), an outside-in, continuous view of the organization and its portfolio companies' internet-facing attack surface, and Third-Party Cyber Assurance (TPCA), end-to-end due diligence and continuous assurance across third parties and the supply chain.

· Responsible to operate the always-on monitoring platforms, run third-party assurance, validate clear-and-present-danger threats, and drive remediation - narrowing the window between exposure and exploitation across organization, its portfolio companies, and third parties.

Key Responsibilities:

· Minimum 3 years of hands-on experience in cybersecurity operations, attack surface/exposure management, third-party cyber risk assessment, or data lake platforms.

· Strong practical experience in running third-party/vendor security assessments and questionnaires (VDD/ODD, SIG) and control frameworks (NIST, ISO 27001, CIS Controls).

· Hands-on experience with ASM/EASM, cyber exposure, or digital risk/dark-web monitoring platforms, and Cyber Threat Intelligence (CTI).

· Advanced scripting knowledge (e.g. Python, PowerShell, or Bash) to automate tasks and build reporting dashboards on data lake platforms.

· Solid understanding of TCP/IP, DNS, HTTP/S, common cloud exposures (AWS, Azure, GCP), and how third-/fourth-party risk propagates.

· Strong analytical, documentation, and communication skills, with discretion to handle sensitive findings.

· Good communication skill, with the ability to document processes clearly and liaise with technical and business stakeholders.

· Good team player, agile, fast learner, and able to adapt to changes

Good to have:

· Professional certifications: Security+, CEH, GIAC (GSEC, GCIH), CompTIA CySA+, or equivalent.

· CISSP Associate/CISM candidature.

· Experience in building operational dashboards and cyber posture scorecards.

· Familiarity with tuning detection logic and refining control baselines as a capability matures.