Sr. Engineer - Darktrace

Senior Engineer Darktrace NDR to manage and optimize our Network Detection and Response (NDR) infrastructure with a focus on Darktrace. This role will involve defining security requirements, deploying, and tuning NDR capabilities, integrating data sources, and enhancing detection content. The ideal candidate will have strong experience in network security, threat detection, and security operations with hands-on expertise in deploying and managing Darktrace NDR solutions.

How you’ll make an impact

• Define NDR requirements based on security policies, compliance standards, industry best practices, and business needs.
• Identify key TAP/SPAN points and virtual environments to ensure comprehensive network visibility.
• Deploy physical and virtual Darktrace collectors for network telemetry ingestion.
• Configure and implement ingestion pipelines, health monitoring, and uptime tracking for all deployed collectors.
• Collaborate with the Darktrace team to support the ingestion of unsupported data sources and contribute to the development of new parsing and processing pipelines.
• Work with stakeholders to identify and implement key integrations between Darktrace and other security platforms.
• Develop and fine-tune NDR detection rules and behavioral models to address security gaps.
• Provide contextual intelligence to reduce false positives, enhance alert fidelity, and identify true threats.
• Establish reporting and dashboards to measure risk, improve operational efficiency, and enhance visibility across security operations.

What we’re looking for

• 5+ years of experience in network security, threat detection, or security operations, with at least 2 years managing Darktrace NDR solutions.
• Strong understanding of NDR principles, network telemetry, and packet analysis.
• Hands-on experience with deploying and managing Darktrace or other NDR related sensors and collectors in on-premises, hybrid, and cloud environments.
• Proficiency in network protocols (TCP/IP, DNS, HTTP, etc.), security architecture, and traffic analysis.
• Familiarity with SIEM/SOAR integrations and security automation workflows.
• Knowledge of compliance frameworks (e.g., NIST, CIS, PCI-DSS, ISO 27001) and regulatory requirements.
• Strong problem-solving skills with experience in investigating network threats and anomalies.
• Excellent communication skills and ability to work with cross-functional teams.