Detection Engineer – Security Exposure & Third-Party Cyber Assurance

About the role

We are seeking a Detection Engineer to join our Security Exposure and Third‑Party Cyber Assurance Centre of Excellence. The role will support continuous monitoring of the organisation’s internet‑facing attack surface and perform cyber due‑diligence on third‑party suppliers, helping to reduce the time between exposure identification and remediation.

Key responsibilities

• Operate and maintain always‑on security exposure and external threat monitoring platforms.
• Monitor the organisation, portfolio companies, and third parties for internet‑facing vulnerabilities, exposures, and emerging cyber threats.
• Perform Attack Surface Management (ASM/EASM) activities to identify, assess, validate, and prioritise external security exposures.
• Conduct third‑party/vendor cybersecurity assessments, including security questionnaires, VDD, ODD, and SIG.
• Assess third‑party security controls against frameworks such as NIST, ISO 27001, and CIS Controls.
• Leverage Cyber Threat Intelligence, digital risk, and dark‑web monitoring to identify and validate relevant threats.
• Investigate high‑risk threats and coordinate remediation with stakeholders.
• Develop scripts and automation using Python, PowerShell, or Bash to streamline monitoring, analysis, and reporting.
• Build and maintain operational dashboards and cyber‑posture metrics using data‑lake platforms.

Required profile

• Degree in Computer Science, Information Technology, or a related discipline.
• 3–5 years of hands‑on cybersecurity experience, preferably in operations, attack surface management, or third‑party cyber risk assessment.
• Practical experience conducting third‑party security assessments and questionnaires (VDD, ODD, SIG).
• Good knowledge of cybersecurity frameworks such as NIST, ISO 27001, and CIS Controls.

Required skills

• Python
• PowerShell
• Bash
• Attack Surface Management (ASM/EASM) platforms
• Security exposure monitoring platforms
• Data‑lake platforms for reporting
• Cyber Threat Intelligence (CTI) tools
• Dark‑web monitoring tools
• Knowledge of NIST, ISO 27001, CIS Controls
• Experience with VDD, ODD, SIG assessments