SIEM Content Development Specialist - VOIS

About the role

We are seeking a SIEM Content Development Specialist to join the Cyber Defence – Cyber Security Operations function in Pune and contribute to the detection capability of the Cyber Security Operations Centre (CSOC). This is a senior cyber security role requiring 10+ years of relevant experience across Security Operations, SIEM Content Development, Security Engineering, Threat Hunting and Threat Intelligence.

What you'll do

• Develop, refine and optimise security content and detection rules across existing and new SIEM, EDR and XDR technologies
• Translate threat intelligence, adversary behaviour, attack vectors and MITRE ATT&CK TTPs into indicator-based and behavioural detections that identify or prevent…
• Create threat scenarios and SIEM use cases, with particular emphasis on ArcSight and ELK/Elastic, while supporting other SIEM technologies
• Analyse security events, threats, adversaries and attack tools to identify opportunities for new or improved detection coverage
• Tune SIEM rules and correlation logic to improve CSOC detection effectiveness and operational efficiency

What you need

• 10–18 yrs of experience
• SIEM
• EDR
• Splunk
• Python
• CISSP
• Firewalls
• B.Tech or B.E. or B.Sc or BCA

Good to have

• Telecom
• Elasticsearch
• AWS
• GCP
• SQL
• Data structures