Dein persönlicher KI-Karriere-Agent
Developing detection logic for security systems based on threat landscapes and MITRE ATT&CK. Several years of IT security and detection engineering experience required. Agile team environment at tech company for a leading bank.
Deine Match-Analyse
Warum dieser Job zu dir passt
Mögliche Lücken
Tipps für deine Bewerbung
Anforderungen
- Several years of IT security experience
- Solid hands-on Detection Engineering experience
- Experience in Threat Hunting or SOC environment (ideal)
- Strong knowledge of MITRE ATT&CK framework
- Experience translating attack techniques into detection use cases
- Experience with SIEM, EDR, or comparable detection platforms
- Familiarity with relevant query and detection languages
- Good understanding of security telemetry and log sources
- Structured, analytical, and solution-oriented work approach
- High degree of initiative and teamwork
- Relevant Detection Engineering experience
- Encouraged to apply even if not matching all requirements
Aufgaben
- Analyze threat landscapes and attack techniques
- Derive relevant detection use cases
- Develop detection logic for security systems
- Support the entire detection lifecycle
- Analyze potential attack paths
- Develop and document detections
- Test and continuously optimize detection rules
- Shape and advance cyberattack detection approach
- Develop use cases and detection rules for SIEM, EDR, cloud, and security systems
- Analyze current threats, attack techniques, and TTPs
- Translate threats into suitable detection use cases using MITRE ATT&CK
- Analyze log and telemetry data
- Assess relevant data sources for detecting attack techniques
- Test and validate detection rules for effectiveness
- Optimize detection rules to reduce false positives
- Assess existing detection coverage using MITRE ATT&CK
- Identify gaps in attack detection capabilities
- Develop measures to close detection gaps
- Translate insights from security incidents and threat hunts into detection rules
- Work closely with Threat Intelligence, Threat Hunting, and Incident Response teams
- Further develop Detection-as-Code processes
- Contribute to versioning, reviews, and testing of detection content
- Contribute to automated deployment of detection content
- Contribute ideas to improve detection strategy, processes, measures, and tools
Berufserfahrung
Ausbildung
Sprachen
Tools & Technologien
Von Nejo automatisch aufbereitet
Nejo hat diesen Job automatisch von der Website des Unternehmens DKB Code Factory erfasst und die Informationen auf Nejo mit Hilfe von KI für dich aufbereitet. Trotz sorgfältiger Analyse können einzelne Informationen unvollständig oder ungenau sein. Bitte prüfe immer alle Angaben in der Originalanzeige! Inhalte und Urheberrechte der Originalanzeige liegen beim ausschreibenden Unternehmen.
Zur Originalanzeige bei DKB Code FactoryÜber das Unternehmen
The company helps shape innovative finance products through user experience research and product development.
Nejo bewertet ihn, und bringt ihn danach gemeinsam mit dir in Bestform.
Noch nicht perfekt?
- Trade RepublicSenior Security Engineer - Purple Teaming (m/w/x)Vollzeitnur vor OrtSeniorBerlin
- Delos CloudCyber Defense Expert - Threat Detection & Response (m/w/x)Vollzeitnur vor OrtSeniorEschborn, Berlin, St. Leon-Rot, Leipzig
- EY Global ServicesBerater SIEM - Cybersecurity (m/w/x)Vollzeitnur vor OrtBerufserfahrenDüsseldorf, Berlin
- Landesbank Baden-WürttembergAdvanced Expert Threat Protection & Infrastructure IT-Security (m/w/x)Vollzeit/Teilzeitnur vor OrtBerufserfahrenStuttgart, Berlin, Leipzig
- IONOS SECyber Security Engineer — Infrastructure & AI Platform Security (m/w/x)Vollzeitnur vor OrtBerufserfahrenBerlin