Detection Engineer

SKILLS:

. The successful candidate is expected to support CSAD's new Security Exposure and Third-Party Cyber Assurance Centre of Excellence during its build phase.

. The role provides the hands-on technical and operational backbone across two tracks- Security Exposure Management (SEM), an outside-in, continuous view of the organization and its portfolio companies internet-facing attack surface, and Third-Party Cyber Assurance (TPCA), end-to-end due diligence and continuous assurance across third parties and the supply chain.

. Responsible to operate the always-on monitoring platforms, run third-party assurance, validate clear-and-present-danger threats, and drive remediation - narrowing the window between exposure and exploitation across organization, its portfolio companies, and third parties.

Key Responsibilities:

. Minimum 3 years of hands-on experience in cybersecurity operations, attack surface/exposure management, third-party cyber risk assessment, or data lake platforms.

. Strong practical experience in running third-party/vendor security assessments and questionnaires (VDD/ODD, SIG) and control frameworks (NIST, ISO 27001, CIS Controls).

. Hands-on experience with ASM/EASM, cyber exposure, or digital risk/dark-web monitoring platforms, and Cyber Threat Intelligence (CTI).

. Advanced scripting knowledge (e.g. Python, PowerShell, or Bash) to automate tasks and build reporting dashboards on data lake platforms.

. Solid understanding of TCP/IP, DNS, HTTP/S, common cloud exposures (AWS, Azure, GCP), and how third-/fourth-party risk propagates.

. Strong analytical, documentation, and communication skills, with discretion to handle sensitive findings.

. Good communication skill, with the ability to document processes clearly and liaise with technical and business stakeholders.

. Good team player, agile, fast learner, and able to adapt to changes

Good to have:

. Professional certifications: Security+, CEH, GIAC (GSEC, GCIH), CompTIA CySA+, or equivalent.

. CISSP Associate/CISM candidature.

. Experience in building operational dashboards and cyber posture scorecards.

. Familiarity with tuning detection logic and refining control baselines as a capability matures.