Position Overview
Job Description - SIEM & Detection Engineering
- Configure, optimize, and tune SIEM correlation rules and use cases
- Reduce false positives through rule tuning
- Implement advanced detection use cases
- Integrate additional log sources into SIEM
- Security Tool Integration: Integrate SOC tools such as SIEM, EDR, XDR, Threat Intelligence platforms, Vulnerability scanners, SOAR platforms
- Use Case Development: Develop and implement SOC detection use cases aligned with MITRE ATT&CK, implement threat-based detection scenarios
- Automation & Orchestration: Implement automated response playbooks, support SOAR integration, automate repetitive SOC tasks
- Threat Intelligence Integration: Integrate external and internal threat intelligence feeds, enable IOC-based detection
- Technology Optimization: Improve SOC monitoring coverage, optimize logging architecture, ensure visibility across critical systems
- Docum...