.jpg?1757614389){kind=logo}
- Full-time
Build, test, tune and maintain SIEM/EDR detections and automation workflows for attacker behaviour and control failures in a fintech environment.
Responsibilities
- Develop, test, tune and maintain SIEM/EDR detections for assigned priority attacker behaviours and control failures
- Validate telemetry availability and quality; resolve missing fields, unreliable data and broken dependencies
- Document detection logic, assumptions, limitations, owners, test evidence, runbooks and expected analyst actions
- Support detection-gap analysis after incidents, threat‑intelligence updates and service changes
- Build low‑risk automations for triage, enrichment, routing, evidence collection and reporting