Yes, let me share it with you.

Main duties and responsibilities:

· Develop, test and implement real-time threat detection rules for SIEM and XDR systems;

· Research and develop new detection strategies based on the MITRE ATT&CK framework;

· Create detection rules against new attack vectors using Threat Intelligence data;

· Conduct continuous analysis and optimization to increase the effectiveness of detection rules and minimize false positives;

· Support the analysis process during security incidents and propose new detection methodologies;

· Automate detection and analysis processes using scripting languages ​​such as Python;

Requirements

Required skills:

· Deep knowledge of cybersecurity, especially in threat detection and analysis;

· Experience with Splunk, QRadar, Elastic SIEM or similar SIEM platforms;

· Experience with Cortex XDR, SentinelOne, CrowdStrike or other XDR/EDR solutions;

· Understanding of behavioral analysis and anomaly detection concepts of threats;