Senior SOC Detection Engineer

Requisitos

• Strong practical experience in SOC, Detection Engineering, Threat Hunting, Incident Response or related security fields
• Deep understanding of MITRE ATT&CK, common attack techniques and detection approaches
• Confident command of Splunk SPL or experience with another enterprise SIEM platform
• Experience developing complex search queries, correlations, dashboards and reports
• Practical experience tuning and optimizing detections, working with exceptions and allowlists

Desejáveis

• Experience with Splunk Enterprise Security, CIM, data models, macros and lookups
• Practical experience with Sysmon, Windows Security Auditing, Active Directory, auditd, osquery, Tetragon, Docker or Kubernetes
• Experience with YARA, CALDERA, Shuffle or other security automation and attack emulation tools
• Experience developing detection quality metrics and automated validation frameworks
• Experience with Terraform, Ansible or other Infrastructure as Code tools