Detection Engineer
Pubblicato il 16-08-2026 - Allianz in Italia
About the job
Join the Allianz Cyber Defense Center (ACDC) as the engineer who brings machine learning into our detection workflow. Your mission is to take ACDC beyond rule-based detection into predictive, model-driven threat identification — analyzing patterns, anomalies, and behavioral signals across CrowdStrike EDR and Google SecOps telemetry. You'll work side-by-side with detection engineers, threat hunters, and CTI to catch what static rules can't.
What you do
- Continuously research and develop detection strategies for novel AI-based threat scenarios — translating threat intelligence on adversarial AI techniques into actionable detection logic that analysts can triage with confidence, while partnering with Detection Engineers to operationalize these detections across the ACDC.
- Design and implement detections for AI-driven attack scenarios — leveraging the ACDC's diverse data sources (EDR, SIEM, SOAR telemetry) to identify emerging threat patterns where adversaries utilize AI techniques such as automated phishing, AI-generated social engineering, deepfakes,
or AI-assisted lateral movement.
- Serve as the subject matter expert on out-of-the-box AI/ML capabilities within our SIEM, SOAR, and EDR platforms — evaluating, tuning, and maximizing native AI-powered detection features to ensure optimal coverage against AI-driven threats.
- Build and maintain AI-powered detection pipelines that continuously learn and adapt as new threats emerge.
- Engineer features and curate training data from CrowdStrike Falcon and Google SecOps, ensuring quality, labeling integrity, and statistical relevance.
- Monitor and mitigate AI-specific risks: model drift, training data bias, adversarial inputs, and over-reliance on automation.
- Track and respond to the adversarial AI landscape — AI-generated phishing, evasive malware, deepfake social engineering — and embed countermeasures into our detection stack.
- Apply an MLOps mindset: version models, monitor performance in production