Security Operations Analyst (SIEM Operations and Threat Detection)
Core
Enhancing threat detection and cybersecurity operations capabilities through security content management, validation of detection mechanisms, and SIEM optimization.
Role type
Senior IC Security Operations Analyst (SIEM/Threat Detection)
Builds
Security monitoring, analytics, and detection capabilities across SIEM, EDR, and cloud platforms
Domain
Cybersecurity / Threat Detection
Deliverable
production ML models
Required skills
SIEM operations, threat detection engineering, security content management, use case lifecycle management, data source integration, process optimization, security architecture review, metrics and KPI reporting, false positive reduction, documentation management
Preferred skills
Cyber risk management, operational excellence, stakeholder communication
Technologies
SIEM, EDR, cloud security platforms
Responsibilities
Develop, implement, validate, tune, and maintain security monitoring and detection capabilities; onboard and integrate new security data sources and telemetry feeds; manage security content quality assurance and rule reviews; collaborate with threat intelligence and incident response teams; participate in cybersecurity architecture reviews; prepare and maintain operations metrics, dashboards, and performance reports; review and assess detection effectiveness and operational processes; gather operational feedback for optimization; support CSOC procedure and documentation development; prepare technical reports for stakeholders