Job

SIEM/SOAR Content Development:

• Develop, refine, and maintain SIEM and SOAR content, including rules, correlation searches, alerts, dashboards, and reports. 


• Analyze and interpret complex datasets to create meaningful security insights. 


• Continuously update SIEM content to reflect evolving threats and security trends. 


• Integrate new data sources and tune to work with existing use cases and alerting.


• Develop and implement best practices for SIEM and SOAR content management and development. 


• Work closely with clients to understand their security needs and tailor SIEM content accordingly. 


• Provide expert advice and recommendations on SIEM best practices and configurations. 


• Serve as a subject matter expert in SIEM technologies and content development.


• Stay abreast of the latest cybersecurity technologies and practices.

Threat Analysis and Monitoring: 

• Proactively identify and analyze emerging threats and adjust alerts and correlation searches accordingly.


• Collaborate with the incident response team for threat detection and analysis. 


• Collaborate with SOC Analysts to tune alerts and create custom monitoring. 


• Optimize SIEM for efficient threat monitoring and alerting. 


• Guide and mentor junior team members in SIEM content creation and threat analysis. 


• Participate in resolving Tier 3 escalations received from the SOC. 


• May perform other duties as assigned.