Skip to content

Open nowPosted 13 days ago

Senior Detection Research Engineer

Cloud Protection by WithSecure

Where
Helsinki
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Detection Research EngineerCloud Protection by WithSecure · Helsinki
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Cloud Protection by WithSecure's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.5% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.4%3 days
  3. 11.5%7 days
  4. 18.1%14 days
  5. 35.6%30 days
  6. 44.6%60 days
This job: posted 13 days ago

The posting

Cloud Protection protects Fortune 500 enterprises and government organizations worldwide from malware, phishing, and identity-based attacks in Salesforce. Our work builds on more than 30 years of experience in analyzing malware and defending against advanced threats — expertise few security companies can match.

It’s our people who make that possible. Newly independent after years as WithSecure’s most autonomous business unit, we combine the focus and speed of a startup with decades of cybersecurity depth. We’re a diverse team that values passion, purpose, and genuine wellbeing at work, and we’re looking for people who want to set the standard for Salesforce security with us.

We’re looking for a Senior Detection Research Engineer to join our Threat Intelligence team. You’ll research threats targeting Salesforce environments, then turn what you learn into detection logic that protects customers. You’ll also help shape how we write, test, and evaluate detections as our protection capabilities evolve.

This is a senior individual contributor role with substantial hands-on work and close collaboration with product and engineering teams.

Key Responsibilities

  • Research malware, phishing, and adversary techniques including emerging threats involving AI that target Salesforce and SaaS environments, and translate findings into detection requirements.
  • Analyze telemetry, investigate false positives and missed detections, and use the findings to improve existing detections.
  • Design detection logic and workflows that combine metadata, threat signals and analysis results to make reliable protection decisions.
  • Explore new technologies and detection approaches, test promising ideas quickly, and turn what works into practical improvements to protection.
  • Work with detection technology and threat intelligence partners to assess accuracy, latency and contribution to protection.
  • Identify missing protection capabilities and work with product and engineering teams to define and prioritize improvements.

What are we looking for?

  • 7+ years of experience in detection engineering, threat research, malware analysis or a related security role.
  • Strong understanding of malware, phishing, URL-based threats and adversary techniques.
  • Hands-on experience designing, testing and tuning detections, including investigating false positives and missed detections.
  • Experience assessing detection technologies or intelligence sources using representative data and clear performance measures.
  • Experience working with engineering and product teams to turn security research into protection improvements.
  • Ability to explain technical findings and recommendations clearly to both technical and non-technical audiences.
  • Familiarity with Salesforce, SaaS or cloud security is a strong plus.
  • Due to our immediate hiring needs, we are currently considering candidates who already have the right to work in Finland without requiring a new work-related residence permit.

The salary displayed on this page represents the estimate for the role. Final compensation is discussed individually and depends on experience, skills, and the local market and might vary up or down.

What will you get from us

  • Meaningful work with real-world impact – your work helps protect businesses and critical infrastructure from modern cyber threats.
  • Flexible ways of working, including up to 30 days per year working abroad and paid sick leave from day one.
  • A strong focus on well-being, with mental health support and comprehensive benefits.
  • Continuous learning, modern tools, and a people-first culture that values trust and collaboration.
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Cloud Protection by WithSecure's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Cloud Protection by WithSecure's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Cloud Protection by WithSecure's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.