SIEM Content Development Specialist - VOIS
BengaluruFull-time10–18 yrsPosted 5 days ago
Leadership cybersecurity role at Vodafone (VOIS) in Bengaluru. Needs 10+ years and a B.Tech, B.E. or B.Sc.
About the role
We are seeking a SIEM Content Development Specialist to join the Cyber Defence – Cyber Security Operations function in Pune and contribute to the detection capability of the Cyber Security Operations Centre (CSOC). This is a senior cyber security role requiring 10+ years of relevant experience across Security Operations, SIEM Content Development, Security Engineering, Threat Hunting and Threat Intelligence.
What you'll do
- Develop, refine and optimise security content and detection rules across existing and new SIEM, EDR and XDR technologies
- Translate threat intelligence, adversary behaviour, attack vectors and MITRE ATT&CK TTPs into indicator-based and behavioural detections that identify or prevent…
- Create threat scenarios and SIEM use cases, with particular emphasis on ArcSight and ELK/Elastic, while supporting other SIEM technologies
- Analyse security events, threats, adversaries and attack tools to identify opportunities for new or improved detection coverage
- Tune SIEM rules and correlation logic to improve CSOC detection effectiveness and operational efficiency
What you need
- SIEM
- EDR
- Splunk
- Python
- CISSP
- Firewalls
Good to have
- Telecom
- Elasticsearch
- AWS
- GCP
- SQL
- Data structures