.jpg?1757614389){kind=logo}
- Full-time
Develop, test, tune and maintain SIEM/EDR detections and automation workflows for priority attacker behaviours and control failures.
Responsibilities
- Develop, test, tune and maintain SIEM/EDR detections
- Validate telemetry availability and quality
- Document detection logic and runbooks
- Support detection-gap analysis after incidents
- Build low-risk automations for triage, enrichment, routing, evidence collection and reporting
Requirements
- Nice to have: Detection-as-code
- Nice to have: version control
- Nice to have: peer review
- Nice to have: automated rule testing
- Nice to have: continuous integration practices