Threat Detection Engineer
Speedinvest is a European venture capital firm that invests from seed to growth stage (Series B to pre-IPO), backing founders with sector-specific expertise and a large network of operational support. It leads the majority of its initial investments and continues to support portfolio companies through multiple follow-on rounds as they scale.
About Speedinvest
Speedinvest is a pan-European venture capital investor with specialist investment teams organized around core sectors including AI & Infra, Climate Tech & Industrial Tech, Deep Tech, Fintech & DeFi, Health & Bio, and Marketplaces & Consumer, alongside a dedicated Growth team writing checks from Series B to pre-IPO. The firm emphasizes leading with conviction and long-term capital from day one, leading 85% of its initial investments, participating in 100+ follow-on rounds each year, and backing 70+ Series A companies over the past four years. Speedinvest works with startup founders across Europe and beyond, providing not just capital but network access and growth support, and counts companies like Bitpanda, Moove, cylib, Tide, Gigs, Upvest, and GoStudent among its portfolio.
Skills
About the Role
You will build and improve threat detection and automation capabilities. You will configure and tune SIEM detections, create security automations, hunt for threats, and monitor environments across AWS, GCP, internal applications, and employee endpoints. You will investigate complex incidents, coordinate containment and recovery, improve internal tools and detection quality, and participate in the security incident-response on-call rota.
Requirements
- Knowledge of Splunk, Scanner, Sentinel, or SecOps.
- Understanding of modern cloud, SaaS, and desktop attack and defence techniques.
- Experience in security automation, including scripts and end-to-end automated workflows.
- Familiarity with SOAR platforms and automated threat detection and response.
- Experience writing automation and scripts.
- Spoken and written communication skills.
Responsibilities
- Support the development and implementation of the threat-detection strategy.
- Create custom log parsers, configure alert rules, analyze logs, and tune detections to reduce false positives.
- Create security automations and services for tasks such as data enrichment and phishing-email removal.
- Hunt for sophisticated threats across infrastructure using threat intelligence and detection techniques.
- Monitor and respond to threats across AWS, GCP, internal applications, and Windows and macOS endpoints.
- Collaborate with cross-functional teams to develop and implement business-specific threat-detection rules.
- Ensure detection quality and ecosystem uptime through test-driven development and proactive health monitoring.
- Build and enhance internal tools that improve threat detection, data visibility, and response efficiency.
- Lead complex incident investigations and coordinate containment, remediation, and recovery.
- Participate in the security incident-response on-call rota.
Benefits
- MELP flexible benefits app with 50 EUR per month accrual
- 25 days paid annual leave
- 3 paid days off for volunteering activities
- Parental leave
- Family-friendly leave
- Mental wellbeing platform Plumm
- Work-from-home equipment allowance
- Sabbatical leave
- Share options
- Team events
