SIEM Content Development Specialist
Core
Designing and developing cutting-edge detection content and response workflows for the Cyber Security Operations Center to detect and respond to cybersecurity incidents.
Role type
Senior IC SIEM Content Development Specialist
Builds
Detection rules, logic, and response playbooks for SIEM and threat management technologies
Domain
Cybersecurity, Telecoms, Network Security
Required skills
SIEM rule development, threat intelligence translation, telecom protocols (SS7, Diameter, GTP-C), network architecture, security event analysis, cloud security (Azure, AWS, GCP), CI/CD integration, version control (Git), regex development, scripting, Kusto/SQL
Preferred skills
EDR management, IDS/IPS configuration, MITRE ATT&CK frameworks, cloud-native SIEM platforms, security automation
Technologies
ArcSight, Sentinel, QRadar, LogRhythm, Splunk, Microsoft Defender, FireEye, Tanium, Elastic, Azure, AWS, Google Cloud, Oracle, Git, Kusto, SQL
Responsibilities
Develop and refine SIEM rules and logic to enhance detection accuracy; Manage the lifecycle of detection content including testing and release; Collaborate with DevOps/SecOps to integrate security content into CI/CD workflows; Support security event analysis and threat response activities; Create cyber security reports and advisories; Track and report on the effectiveness of deployed content using metrics.
Seniority
Mid-Senior, hands-on IC
