SOC Lead (Detection Engineering and Automation)
- Рівень:
- lead
- Джерело:
- djinni.co
Що робити
- Lead and develop the Detection Engineering & Automation squad, setting priorities, mentoring team members, and driving the delivery of detection and automation initiatives
- Own the detection lifecycle end-to-end, including use-case definition, development, testing, tuning, and retirement
- Build and maintain SIEM/EDR detection rules, detection-as-code, enrichment workflows, and SOAR automation playbooks
- Collaborate with SOC, Cyber Defense leadership, Incident Response, and engineering teams to review false positives, reduce alert noise, and address detection coverage gaps
- Map detections to critical assets, attacker TTPs, telemetry sources, and incident response runbooks
Що очікуємо
- Higher education in Computer Science, Information Security, or a related technical field is preferred
- 5+ years of experience in SOC, Detection Engineering, Threat Detection, or Security Automation
- 2+ years of hands-on experience in Detection Engineering
- 1+ year of experience leading or mentoring a team of engineers
- Hands-on experience writing and tuning detection content (Sigma, YARA, SIEM correlation rules) and applying detection-as-code practices
Що пропонуємо
- 20 paid vacation days per year
- 10 paid sick leave days per year
- Public holidays as per the company’s approved Public holiday list
- Medical budget
- Opportunity to work remotely
Схожі вакансії
З блогу Trackr
Усі статті →
Знайдено через trackr.help/jobs · Канал: @trackrhelp · Бот для персональних сповіщень: @trackrhelpBot