- Guararema, São Paulo, Brazil
- On-site
- Full-time · Mid
- 3+ years
Deep technical subject matter expert who creates, tests, deploys and continuously improves SIEM detections to increase detection and response efficiency.
Compensation
An industry competitive salary and benefits package, including company bonus.
Responsibilities
- Create, deploy and maintain SIEM detection rules aligned with MITRE ATT&CK
- Validate detections through testing and attack simulation before and after deployment
- Review and tune existing detections using performance metrics to improve true positive rates, reduce false positives and retire noisy or low-value rules
- Identify gaps in detection coverage across business segments and prioritize new use cases based on threat relevance and risk
- Ensure security telemetry is complete, accurate and suitable for detection use cases
Requirements
- Cybersecurity certification
- Nice to have: detection-as-code
- Nice to have: Git
- Nice to have: SOAR
- Nice to have: security automation