Security Content Specialist
Core
Creating, testing, enhancing, and documenting threat detection rules to validate cyber detection activity and protect the organization from global threat actors.
Role type
Security Content Specialist (SIEM/EDR)
Builds
Threat detection rules, alerting logic, and documentation for SIEM and EDR platforms.
Domain
Financial Services / Cybersecurity
Required skills
Threat detection rule creation, SIEM tuning, EDR configuration, MITRE ATT&CK framework application, adversarial tactics knowledge, IT architecture understanding, security control technology knowledge, agile development lifecycle, thorough documentation, bug tracking management, alert analysis, process documentation, scripting (PERL, Python, Powershell), Jira ticket management, Confluence documentation.
Preferred skills
Financial Services experience, Software development experience, Technical security certifications (GMON, GCDA, GCIH).
Responsibilities
Assist on boarding of new content and detection rules, prioritize and manage bug tracking, test and tune threat detection use cases within SIEM and EDR platforms, monitor and maintain SIEM look up tables, monitor established content for metrics and efficiency, validate and document testing through Confluence, document and maintain assets and scripts, partner with Threat Intelligence to align detection strategy, partner with purple team and security professionals, participate in alert creation in security controls, document maintain a library of IT groups processes.
Seniority
Mid-level, hands-on IC
