Detection engineer
4 settimane fa
Detection Engineer About the Role We are looking for a Senior Detection Engineer to join our international cybersecurity team. The person who joins will help build upon the current ATT& CK-based detection manual used by the Getronics Security Operations Center (SOC), and take it to the next level of maturity and capability. Additionally, they will support the day-to-day threat detection work of a team of analysts servicing a wide range of clients across various industries, including Getronics' private/hybrid cloud and internal IT services. Key Responsibilities · Develop threat detection rules to identify modern attacker tactics and techniques, working closely with threat intelligence, incident response, security analysts, and infrastructure/security architecture teams. · Maintain and optimize the existing detection rulebase, applying lifecycle management and deprecating rules where needed. · Assess ATT& CK coverage to identify detection gaps and improvement opportunities. · Define and maintain effective detection metrics. · Support compliance-related use cases as required. · Create and maintain lists to support correlation rules. · Design dashboards for specific threat detection use cases and train analysts on their use. · Provide input into threat hunting activities through the development of efficient search queries. · Collaborate with business and IT teams to create detection strategies aligned with current and emerging business needs. · Analyze alert trends and propose improvements. · Support data collection improvements and maintain configuration management documentation. Requirements · Minimum of 2 years' experience as a Cybersecurity Detection Analyst working with SIEM technologies (QRadar, Log Rhythm, Splunk, Elastic Security, Insight IDR, Alien Vault OSSIM, etc.). · Previous experience in other technical cybersecurity roles such as SOC Analyst, Threat Intelligence Analyst, or Pentester. · Hands-on experience implementing detection playbooks based on the MITRE ATT& CK framework. · Strong analytical and problem-solving skills. · Solid understanding of the current threat landscape, including common attack vectors and best practices for protecting systems and networks. · Advanced knowledge or experience with at least two of the following technologies: Python, Reg Ex, Sigma, YARA. · Experience fine-tuning correlation rules for optimal performance. · Strong communication skills with the ability to document clearly and summarize effectively. · Fluent English is mandatory due to international team collaboration. · Structured, goal-oriented working style.
-
Detection Engineer
2 settimane fa
Torino, Italia Getronics A tempo pienoDetection Engineer About the Role We are looking for a Senior Detection Engineer to join our international cybersecurity team. The person who joins will help build upon the current ATT&CK-based detection manual used by the Getronics Security Operations Center (SOC), and take it to the next level of maturity and capability. Additionally, they will support the...
-
Detection Engineer
4 giorni fa
Torino, Italia Getronics A tempo pienoDetection EngineerAbout the RoleWe are looking for a Senior Detection Engineer to join our international cybersecurity team.The person who joins will help build upon the current ATT&CK-based detection manual used by the Getronics Security Operations Center (SOC), and take it to the next level of maturity and capability.Additionally, they will support the...
-
Senior Detection Engineer: Elevate SIEM
2 settimane fa
Torino, Italia Getronics A tempo pienoA leading cybersecurity firm located in Torino, Italy, is seeking a Senior Detection Engineer to enhance threat detection capabilities within their international team. The ideal candidate will have a minimum of 2 years' experience in cybersecurity detection analysis, a solid background with SIEM technologies, and the ability to develop detection rules based...
-
Linux Security Engineer
4 settimane fa
Torino, Italia Exein A tempo pienoAt Exein, our mission is to build the world’s first ecosystem for IoT device security, ensuring all types of devices are secure globally. Our dynamic team is passionate about data, machine learning, open source, and firmware. Our unique products empower developers to secure their IoT devices with cutting-edge technology in an easy and frictionless way. ...
-
Security Engineer
4 settimane fa
Torino, Italia RED Global A tempo pienoRuolo : Endpoint Security Engineer Luogo: 100% Remote iva / B2B Contract / Freelance Stiamo cercando un Endpoint Security Engineer con esperienza pratica in Trellix Endpoint Detection and Response (EDR) per unirsi al nostro team di sicurezza operativo in modalità completamente remota. La figura sarà responsabile della gestione e della protezione di...
-
Linux Security Engineer
4 settimane fa
Torino, Italia Exein A tempo pienoAbout us At Exein, our mission is to build the world’s first ecosystem for IoT device security, ensuring all types of devices are secure globally. Our dynamic team is passionate about data, machine learning, open source, and firmware. We constantly work to secure millions of devices, making daily life safer for everyone. Our unique products empower...
-
Linux security engineer
4 settimane fa
Torino, Italia Exein A tempo pienoAbout us At Exein, our mission is to build the world's first ecosystem for Io T device security, ensuring all types of devices are secure globally. Our dynamic team is passionate about data, machine learning, open source, and firmware. We constantly work to secure millions of devices, making daily life safer for everyone. Our unique products empower...
-
Linux Security Engineer
4 settimane fa
Torino, Italia Exein A tempo pienoAbout us At Exein, our mission is to build the world’s first ecosystem for IoT device security, ensuring all types of devices are secure globally. Our dynamic team is passionate about data, machine learning, open source, and firmware. We constantly work to secure millions of devices, making daily life safer for everyone. Our unique products empower...
-
Linux Security Engineer
2 settimane fa
Torino, Italia Exein A tempo pienoAbout us At Exein, our mission is to build the world's first ecosystem for Io T device security, ensuring all types of devices are secure globally. Our dynamic team is passionate about data, machine learning, open source, and firmware. We constantly work to secure millions of devices, making daily life safer for everyone. Our unique products empower...
-
Machine Learning Engineer
1 settimana fa
Torino, Italia Intecs A tempo pienoIntecs Engineering Spais an Italian company specialized in the design and development of applications, tools, software, hardware components and products for the Aerospace, Defence, Transport, Railway, Telecommunications and Smart Systems markets in collaboration with the main Industries, Organizations, Universities and European and Italian Research...
