Description

You will focus on SIEM rule development and detection optimization to protect against evolving threats.

Responsibilities

• Develop and optimize SIEM rules based on telemetry, alerts, log sources, and user or service-based patterns.
• Fine-tune detection rules to minimize false positives and negatives while increasing actionable event accuracy.
• Create queries, dashboards, reports, and knowledge objects to support SIEM optimization.
• Collaborate with SIEM engineers to implement rule development recommendations and maintain alerting integrity.

Required Skills

• Experience with IBM QRadar SIEM.
• Experience with Google SOAR.
• Proficiency in SIEM rule development and optimization.
• Practical application of the Mitre ATT&CK framework.
• Deep understanding of adversary Tactics, Techniques, and Procedures (TTPs).
• Ability to develop complex queries, dashboards, and reporting objects.
• Experience analyzing telemetry, alerts, and log source patterns.

Preferred Skills

• 10 years of professional experience in security operations.

Key Skills

Education

Not specified