Responsibilities:




Create integrations with various network and security related services through their log events.
Create rules to identify common attacker techniques and tactics, and to raise alarms.
Create machine learning jobs to detect elementary and complex attack behaviors.
Create security oriented Kibana dashboards and other investigative elements.
Create incident response playbooks.
Create and deploy data enrichment such as applying threat intelligence to facilitate the above detections.
Communicate with customers over voice, video, email and chat systems with regards to their needs when it comes to use cases, onboarding, and making proactive suggestions.


 


Requirements




Bachelor degree in Networking, Computer Sciences, or any related field.
Significant experience working as a SIEM analytics developer for security use cases with a SIEM solution such as Elastic Stack or IBM QRadar.
Experience using Elastic Stack.
A thorough understanding of the cyber kill chain and how to implement it in use cases.
A solid understanding of software vulnerabilities and exploits.
A good understanding of software engineering practices and automated testing.


High level of experience with Elastic Stack.
Experience working with Grok Patterns.
Experience with threat hunting through the use of a SIEM.
Experience with forensics being done through the use of a SIEM.
Experience working in a distributed team.
Apply for here