What The Role Is
You play a critical role in developing and maintaining advanced cybersecurity capabilities by sharpening the ability to detect, investigate, and respond to cyber threats by engineering tools, processes, and automation that enable scalable, efficient security operations.
What You Will Be Working On
- Collaborate with threat intelligence and cyber security teams to craft and refine detections based on real-world threat activity
- Develop and maintain high-fidelity detection methods across Security Info and Event Management (SIEM), Endpoint Detection and Response (EDR) and NDR (Network Detection and Response)
- Recognise repeating tasks, design and develop code/script to automate and orchestrate workflows
- Document and conduct peer-review of detection logic, assumptions, expected outcomes and validation methods to ensure rigorous and repeatable process
Challenge(s) - Applying strong software engineering discipline into detection content, which requires practices such as version control, peer reviews, unit testing and automation
- Validating detection codes without relying on live incidents
- Adapting to constantly evolving attackers, requiring regular review and updates of detection methods
- Developing and maintaining detection methods for diverse network infrastructure environments
What We Are Looking For
- Education in Cybersecurity, Computer Science, Information Security, or a related field
- At least 6 years of working experiences in IT or cyber environment
- Good understanding of MITRE ATT&CK TTPs
- Related professional qualifications/certifications is advantageous
- Experience with coding/scripting languages is advantageous
- Strong communication and documentation skills
- Ability to work independently in a fast-paced environment
- Collaborative spirit for cross-functional team engagement
Only shortlisted candidates will be notified.
