Detection Engineering Lead

Cabot Corporation (NYSE: CBT) is a leading global specialty chemicals and performance materials company headquartered in Boston, Massachusetts, USA. Our businesses deliver a broad range of products and solutions to customers in every corner of the globe, serving the transportation, infrastructure, environment and consumer industry sectors. We bring the power of innovative chemistry to solve customers' challenges today while preparing them to meet tomorrow’s needs. Our commitment to innovation is driven by a passion to advance our customers' businesses through our deep understanding of their applications and the global trends that impact their operations. If you do not meet every requirement, or your experience is slightly different that what we have listed, we still encourage you to apply!   Your Role at Cabot As the Detection Engineering Lead, you will design, build, and continuously improve Cabot’s threat detection capabilities. Working in a hybrid model with internal teams and an external managed detection partner, you will help ensure security threats are identified quickly and effectively across our global manufacturing environment. You will lead the development of detection content, improve monitoring capabilities, and help shape the future of cybersecurity operations at Cabot. This role reports to the Cybersecurity Operations Services Manager. How You Will Make an Impact Lead the design, development, testing, and improvement of security detection content across Cabot’s monitoring platforms. Continuously improve detection capabilities to increase visibility and reduce security risk. Define and maintain telemetry and logging requirements needed for effective threat detection. Work with internal teams and external security providers to improve detection quality and operational effectiveness. Support threat hunting, incident response, and investigations by providing detection expertise and insights. Develop and maintain threat-informed detection strategies aligned with frameworks such as MITRE ATT&CK. Promote detection engineering best practices, including version control, testing, peer reviews, and automation. Track and report on detection coverage, effectiveness, and key performance metrics. What You Will Bring to Cabot 5+ years in security operations, detection engineering, or threat detection, with clear depth in detection content development. Deep hands-on expertise with a major enterprise SIEM (for example Splunk, Microsoft Sentinel, Elastic, Trellix, QRadar, or equivalent). Proven detection-content development and tuning at scale. Strong command of MITRE ATT&CK, log pipelines, and threat detection methodology. Experience working alongside or governing a managed detection provider (MDR / MSSP). Scripting and query fluency (Python, a SIEM query language such as KQL or SPL, and regex). Excellent written and spoken English; this is our working language across a global team.

That Strongly Aligns Global industrial, manufacturing, or OT-adjacent environments. Security platform migration or consolidation programs. Maturing or scaling a detection engineering capability. Additional Experience (Nice to Have) Industry certifications: GCDA, GCIA, GCDN, Splunk or Sentinel certifications, OSCP. Familiarity with security frameworks (NIST CSF, MITRE ATT&CK). Measures of Success MITRE ATT&CK coverage of relevant techniques. Improvement in mean time to detect and respond (MTTD / MTTR). Reduction in false-positive rate and analyst noise. Successful platform onboarding and tuning milestones. Quality of partner escalations measured against the defined bar.

Working hours: 9:00–17:30. Occasional flexibility outside standard working hours may be needed to support critical cybersecurity initiatives, major platform changes, or incident response activities. Permanent contract.

EUR 2,700–3,900 gross per month. The final salary offer will depend on the candidate’s previous experience and