Conduct research on emerging threats, vulnerabilities, and zero-day attacks to develop rule logic
Perform use case coverage assessments and implement new use cases based on MITRE ATT&CK TTPs
Maintain and enhance the SIEM use case library for our clients
Lead use case workshops to tune and optimize client SIEM environments
Test and document use cases before production deployment, ensuring adherence to test procedures
Tune existing use cases based on client feedback or threat investigator recommendations
Create use case design documents and investigation playbooks
Track and action all use case tuning requests in a timely manner
Review and update playbooks and documentation periodically for accuracy and relevance
Define and track key risk indicators, performance metrics, and compliance metrics

Requirements

Minimum 6 years of experience in Information Technology
Minimum 4 years of experience in Information Security
Prior experience with SIEM platforms: ArcSight, Splunk, LogRhythm, Azure Sentinel, Exabeam, Elastic, QRadar , LogScale
Strong understanding of cybersecurity fundamentals, threat intelligence, and SIEM technologies
Familiarity with MITRE ATT&CK framework and threat detection methodologies
Knowledge of system development lifecycle, server platforms, networks, and vulnerability assessments
Proficiency in Linux system configuration and networking protocols (TCP, SSL, authentication, OpenSSL, Apache)
Experience with cloud platforms (Google Cloud, Azure, AWS) and Firebase services
Understanding of machine learning foundations and data representation formats (JSON, YAML)
Familiarity with source control tools (Git, TFS) and DevOps technologies (Azure DevOps, GitHub CI/CD)

Benefits

Competitive compensation package
Inclusion benefits
Flexible working arrangements
Professional development opportunities
Variable incentive pay programs

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard skills

SIEMcybersecurity fundamentalsthreat intelligenceMITRE ATT&CKLinux system configurationnetworking protocolscloud platformsmachine learningdata representation formatsvulnerability assessments

Soft skills

leadershipcommunicationorganizationalproblem-solvingcollaboration