🎯
Full-Time Opportunity: This is a permanent, full-time position with a competitive package and real career growth potential.
Job Description
Detection Engineering
- Design, develop, and deploy high‑fidelity detection rules in SIEM (Splunk, Microsoft Sentinel, Devo, QRadar, EDR, etc.).
- Create custom use cases to detect MITRE TTPs aligned with real‑world threats and red team activities.
- Conduct detection gap analysis, tune alerting mechanisms, and eliminate false positives at the MSS customer environment.
- Perform regular fine‑tuning and optimization of detection rules, correlation logic, and alert thresholds across SIEM, EDR, and other security platforms to enhance detection accuracy and reduce false positives.
- Continuously assess detection efficacy based on incident feedback and threat landscape evolution, implementing improvements accordingly.
- Collaborate with red/purple teams to validate detection logic and build threat‑informed defenses.
- Regularly review, update, and enhance detection logic to ensure alignment with the latest threat intelligen...