Detection Engineer (SIEM / XDR) | Senior Associate 2

Your role in this journey: Monitor, investigate, and analyze security events using SIEM solutions. Correlate system, network, and security tool logs to identify threats, suspicious behavior, and potential incidents. Perform event analysis based on TTPs (Tactics, Techniques, and Procedures) and market frameworks such as MITRE ATT&CK and NIST. Develop and improve automations and scripts to optimize monitoring and investigation processes. Support the preparation of technical and executive reports, presenting findings and recommendations to different audiences. Actively identify patterns, anomalies, and trends through the analysis of large volumes of data. Contribute to the continuous evolution of security incident detection and response processes. Stay updated on the cyber threat landscape, new attack techniques, and security technologies.

Desired Candidate Profile

If you possess the following requirements, this opportunity could be yours: Experience with SIEM tools, preferably XSIAM, Google SecOps, or Microsoft Sentinel. Knowledge of query and investigation languages ​​such as SPL, XQL, KQL, LEQL, and Sigma. Experience in correlating security events and analyzing system and network logs. Knowledge of information security frameworks and best practices, such as MITRE ATT&CK and NIST. Knowledge of script development, preferably using Python and Shell Script. Analytical skills to work with large volumes of data and identify patterns or anomalies. Ability to translate technical concepts for non-technical audiences. Experience in preparing technical reports and executive presentations. Excellent communication and teamwork skills. Proactive profile with a continuous interest in learning and professional development in the field of Cybersecurity.

Education

Completed undergraduate degree in Information Security, Computer Science, Software Engineering, or related fields. It can be a plus if you have: English proficiency for reading technical documentation and interacting with industry reference materials. Certifications in Information Security, SIEM, or Cloud Security. Experience in Security Operations Center (SOC) environments. Knowledge of security process automation and incident response. Experience with multiple security monitoring platforms and technologies.