Description
We are seeking a highly motivated and experienced Detection Design Cyber Security Analyst to join our dynamic cybersecurity team. In this pivotal role, you will be instrumental in enhancing our threat detection capabilities by designing, driving implementation, and optimizing detection rules across our Security Information and Event Management (SIEM) platforms.
You will play a key part in improving our incident response workflows and leveraging automation to streamline security operations.
Responsibilities
- Design, develop, and optimize advanced detection rules within SIEM platforms (Splunk, Microsoft Sentinel, Google Chronicle) to identify malicious activity, improve threat coverage, and reduce false positives
- Leverage SOAR technologies to automate security operations, streamline incident investigation and response processes, and integrate security tools for greater efficiency
- Conduct in-depth network traffic analysis and apply strong cybersecurity and networking expertise to detect anomalies, identify indicators of compromise (IoCs), and enhance security monitoring capabilities
- Partner closely with Security Operations, Incident Response, Engineering, and business stakeholders to gather requirements, incorporate feedback, and continuously strengthen detection and monitoring strategies
- Design and implement security monitoring and detection use cases for enterprise AI platforms, including Microsoft Copilot, Azure OpenAI, Google Gemini, and other Generative AI solutions
- Apply expertise in Generative AI, LLMs, RAG, AI Agents, and AI security frameworks (OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF) to detect and mitigate AI-specific threats such as prompt injection, data leakage, jailbreak attempts, model manipulation, and AI supply chain risks
What We Offer You
- A diverse and inclusive environment that embraces change, innovation, and collaboration
- A hybrid working model, allowing for in-office / work from home flexibility, generous vacation, personal and volunteer days
- Employee Resource Groups support an inclusive workplace for everyone and promote community engagement
- Competitive compensation packages including health and wellbeing benefits, retirement savings plans, parental leave, and family building benefits
- Educational resources, matching gifts and volunteer programs
Requirements
- Proven Experience in detection engineering, security operations, or a related cybersecurity role
- SIEM Expertise: Hands-on experience with at least one major SIEM platform (Splunk, Microsoft Sentinel, or Google Chronicle) including rule development, query language proficiency, and content management
- Incident Response: Familiarity with incident response processes and best practices
- SOAR Platform Experience: Practical experience with SOAR platforms for automation and workflow orchestration
- Networking Fundamentals: Solid understanding of networking protocols, network architecture, and security devices (firewalls, proxies like Zscaler)
- Proven ability to leverage AI tools to enhance productivity, optimize workflows to solve business problems, while applying critical judgment to ensure responsible and ethical use of data and AI outputs