Join an autonomous mobility security team supporting SOC operations. Maintain SIEM and SOAR platforms, tune detection rules, build automated response playbooks and Python integrations, and conduct threat hunting to identify security gaps and indicators of compromise.
Responsibilities
- Maintain and optimize SIEM and SOAR platforms for reliable threat detection and response.
- Develop and tune SIEM detection and correlation rules, dashboards, and reports.
- Create and improve SOAR playbooks to automate incident response workflows.
- Build Python integrations and automate alert triage and repetitive SOC tasks.
- Conduct threat hunting across multiple data sources to identify security gaps and indicators of compromise.
- Document detection rules, automation workflows, and incident response procedures.
Required Skills
- SIEM platform administration
- SOAR platform administration
- SIEM detection and correlation rule development
- SOAR playbook development
- Python scripting
- Security automation and integrations
- Alert triage
- Incident response
- Threat hunting
- MITRE ATT&CK and NIST frameworks