Description

You will design and implement security detection mechanisms and data ingestion pipelines to protect against emerging threats.

This role is on-site.

Responsibilities

• Develop custom parsers to extract and normalize data from logs, network traffic, and endpoint sources.
• Design and maintain Yara rules for malware analysis and threat detection.
• Implement playbook automation to streamline incident response processes.
• Build data ingestion pipelines to collect and process large volumes of security data.
• Conduct research to identify vulnerabilities and develop proactive detection mechanisms.

Required Skills

• 5+ years of experience in cybersecurity, focusing on detection engineering and data analysis.
• Expertise in developing custom parsers for log and data normalization.
• Proficiency in creating Yara rules for threat detection.
• Experience implementing playbook automation using platforms like Demisto or Phantom.
• Hands-on experience with SIEM solutions including Splunk, ELK, or QRadar.
• Solid understanding of data ingestion techniques, log management systems, and data lakes.

Preferred Skills

• Relevant cybersecurity certifications such as CISSP, CEH, or GIAC.

Key Skills

Education

Any Graduate