Related skills
splunk soar mitre att&ck kql spl📋 Description
- Own and maintain detection coverage aligned to Cyderes Rule Set
- Lead tuning and optimization of detection rules across SIEM platforms
- Identify, prioritize, and remediate detection gaps
- Execute and guide retrohunt activities to validate detection effectiveness
- Own the technical account relationship for assigned clients
- Lead technical cadence calls on detection performance and gaps
🎯 Requirements
- 3–5 years in detection engineering or security operations
- Hands-on with enterprise SIEMs (Splunk, Sentinel, Chronicle, or equivalent)
- Experience writing and tuning detection rules in production
- MITRE ATT&CK knowledge; map detections to TTPs
- Proficiency in SIEM query languages (SPL, KQL, YARA-L)
- Familiarity with SOAR platforms and automation workflows
🎁 Benefits
- Medical Insurance - Employee covered
- Life Insurance - Protection for what matters most
- Retirement Match Program - We invest in your future
- Hybrid Work Model - 2–3 days in office
- Maternity & Paternity Leave - Time for moments that matter
- PTO - Paid Time Off + sick and casual leave
Meet JobCopilot: Your Personal AI Job Hunter
Automatically Apply to Engineering Jobs. Just set your
preferences and Job Copilot will do the rest — finding, filtering, and applying while you focus on what matters.
Help us maintain the quality of jobs posted on Empllo!
Is this position not a remote job?
Let us know!