Description

You will own the development and lifecycle of default detection rules for the XDX platform.

This role is on-site.

Responsibilities

• Develop and implement default detection rules for the XDX platform.
• Correlate detection events across diverse third-party sources and timeframes to improve rule effectiveness.
• Perform rigorous false positive analysis and optimize rules to minimize noise and increase accuracy.
• Apply detection engineering best practices, including writing logic, descriptions, metadata, and tests.
• Monitor emerging threats and industry trends to continuously improve detection efficacy.

Required Skills

• 3+ years of experience writing behavioral detection rules for SIEM, EDR, or XDX platforms.
• Proficiency in Python or other scripting and programming languages.
• Familiarity with building detections mapped to the MITRE ATT&CK matrix.
• Understanding of detection engineering processes, including backlog prioritization and unit/integration testing.
• Experience with CI/CD technologies such as Jenkins.
• Strong analytical skills focused on false positive analysis and problem-solving.
• Knowledge of cybersecurity frameworks, threat intelligence, and industry best practices.

Preferred Skills

• Any Graduate degree.

Key Skills

Education

Any Graduate