Security Operation SIEM Consultant

About the role

As a member of the Cyber Intelligence & Security Operations Center (CISOC) team, you will focus on security monitoring. You will have hands-on experience improving monitoring and detection capabilities by leveraging SIEM/XDR technologies and working with various teams to remediate identified risks.

Key responsibilities

• Implement new security use cases on the SIEM/XDR
• Use case fine-tuning to decrease the ratio of false positives
• Implement new scripts and integrations to leverage and/or enrich SIEM/XDR technologies
• Maintenance of existing scripts and integrations
• Support the implementation and maintenance of simulated threats to automatically test and enhance use cases
• Evolve current technologies according to defined roadmap
• Collaborate on the improvement of the security detection capabilities with Security Detection and Incident Response team
• Act as point of contact for managing & delivering various reports & dashboards
• Work with various risk & information security teams in presenting security monitoring status & updates to technology subject matter experts & management

About you

• Proven experience in development of security use cases for SIEM/XDR technologies such as Splunk Enterprise Security, Microsoft Sentinel or Microsoft Defender
• Programming experience in scripting languages (Python, PowerShell, Bash) and API integration
• Desired experience in BAS (breach & attack simulation) threat creation
• Proven experience in reporting/ticketing platforms like ServiceNow
• Knowledge of common security weaknesses including remediation processes, prioritization, change management, analysis, & triage
• Excellent spoken and written English
• Experience working in a virtual, international and multicultural environment
• Analytical thinking, good communication, problem solving, results oriented, agility and teamwork skills