About the role
Responsibilities:
- Build threat detection using SIEM, EDR, NDR, and real-time streaming.
- Develop detection rules, correlation logic, and threat alerts.
- Create automation workflows and incident-response playbooks.
- Manage data onboarding, normalization, enrichment, and analytics.
- Work with CSOC, IT, OT, and Incident Response teams.
- Build dashboards and improve security monitoring and threat detection strategies.
- Stay updated on emerging cybersecurity threats and attack techniques.
Requirements:
- 6+ years of cybersecurity experience.
- Strong in SIEM, SOAR, log streaming, data lakes/warehousing, and threat detection.
- Experience integrating IT, OT, and business applications with SIEM.
- Programming knowledge in Python, SQL, and Apache Spark.
- Understanding of cyberattacks, threat detection, and security analytics.
- Strong communication, documentation, and cross-functional collaboration skills.
- Bachelor's degree in computer science, MIS, or a related field.
Good to Have:
- Experience with Databricks.
- Experience with Cribl.
- Experience with Tines.
- Experience with cybersecurity data lakehouse platforms.