Content Developer - ArcSight

The Role

You'll be working with security content used to identify suspicious activity, detect potential threats and support security operations.

The role is expected to involve developing and maintaining detection logic, security use cases and related SIEM content.

Key Experience

• Hands-on experience with ArcSight and/or Google Security Operations (Google SecOps / Chronicle).
• Experience developing or maintaining SIEM security content.
• Understanding of security detection rules, correlation logic and detection use cases.
• Knowledge of security monitoring, threat detection and SOC operations.
• Ability to work independently in a remote project environment.
• Experience with detection rule development, threat detection engineering and SIEM content migration would be beneficial.