SIEM Content Development Specialist - VOIS
PuneFull-time6–11 yrsPosted 2 weeks ago
Senior cybersecurity role at Vodafone (VOIS) in Pune. Needs 6+ years and a B.Tech, B.E. or B.Sc.
About the role
We are seeking a SIEM Content Development Specialist to contribute to the Cyber Security Operations Centre (CSOC) detection capability within Cyber Defence. Based in Pune or Bangalore, India, this individual contributor role focuses on translating business requirements, threat intelligence, the evolving threat landscape, MITRE TTPs and cyber risks into effective detection content.
What you'll do
- Develop and enhance detection content across existing and new SIEM, EDR and XDR technologies
- Create threat scenarios and SIEM detection rules/use cases, particularly within Elastic Security/ELK and ArcSight environments
- Tune detection rules and correlation logic to improve CSOC efficiency, detection quality and risk reduction
- Analyse adversaries, attack techniques and tools to create indicator-based and behavioural detections
- Map security detections to MITRE ATT&CK TTPs, cyber kill chain concepts and relevant APT campaign strategies
What you need
- SIEM
- EDR
- Python
- CISSP
- Splunk
- Firewalls
Good to have
- Elasticsearch
- SQL
- Data structures
- JavaScript
- PowerShell
- AWS