SIEM Content Development Specialist - VOIS

About the role

We are seeking a SIEM Content Development Specialist to contribute to the Cyber Security Operations Centre (CSOC) detection capability within Cyber Defence. Based in Pune or Bangalore, India, this individual contributor role focuses on translating business requirements, threat intelligence, the evolving threat landscape, MITRE TTPs and cyber risks into effective detection content.

What you'll do

• Develop and enhance detection content across existing and new SIEM, EDR and XDR technologies
• Create threat scenarios and SIEM detection rules/use cases, particularly within Elastic Security/ELK and ArcSight environments
• Tune detection rules and correlation logic to improve CSOC efficiency, detection quality and risk reduction
• Analyse adversaries, attack techniques and tools to create indicator-based and behavioural detections
• Map security detections to MITRE ATT&CK TTPs, cyber kill chain concepts and relevant APT campaign strategies

What you need

• 6–11 yrs of experience
• SIEM
• EDR
• Python
• CISSP
• Splunk
• Firewalls
• B.Tech or B.E. or B.Sc or BCA

Good to have

• Elasticsearch
• SQL
• Data structures
• JavaScript
• PowerShell
• AWS