Threat Detection Engineer: SIEM & SOAR Innovator

ADP; Madrid; Híbrido; EUR 60.000 - 90.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid work

Descripción de la vacante

ADP is hiring a Threat Detection Engineer in Madrid to join the Global Security teams and drive threat detection across CIRC, Threat Intelligence, Threat Hunting, Red Team, and AppDev. You will design requirements for prevention, detection, and response capabilities within ADP cyber-security platforms.

You will collaborate with Detection Engineers to build and maintain cyber alert catalogs and create content for EDR, NDR, and SOAR.

Formación

• 2 years+ experience in threat detection or threat hunting.
• Strong analytical skills and cross-functional knowledge across multiple security disciplines.
• Strong interpersonal, verbal presentation, and written communication skills.
• Strong knowledge and working experience with databases and data warehouse technologies and solutions.
• Strong working experience with systems automation in Python and PowerShell.
• Strong experience building detection logic utilizing security logs to detect malicious activity with high fidelity across a broad set of detection use cases.
• Strong project/program management experience.
• Working experience with cloud providers, such as AWS or Microsoft Azure.
• Familiar with interpreting the log output of a wide selection of network and host device classes.

Responsabilidades

• Develop advanced alerting capabilities based on threat intelligence and post-incident findings.
• Maintain an expert understanding of attacks, vectors, and emergent threats.
• Develop new detection for our SOAR platform based on stakeholder requests and threat intel.
• Collaborate with CIRC and threat management to understand requirements.
• Experience with creating and implementing content in EDR, NDR, and SOAR.
• Stay updated with latest threats and common TTPs to improve detections.
• Contribute to SOP development and updates.
• Provide content on deliverables including reports, SOPs, and training materials.
• Work with CIRC, Threat management, and engineering teams to improve detections.
• Analyze CIRC alert stats to reduce false positives and focus engineering efforts.

Conocimientos

Threat detection

Threat hunting

Python

SQL

SOAR

EDR

NDR

Data analysis

Herramientas

SIEM

SOAR platform

EDR

NDR

Descripción del empleo

ADP is hiring a Threat Detection Engineer in Madrid to join the Global Security teams and drive threat detection across CIRC, Threat Intelligence, Threat Hunting, Red Team, and AppDev. You will design requirements for prevention, detection, and response capabilities within ADP cyber-security platforms.

You will collaborate with Detection Engineers to build and maintain cyber alert catalogs and create content for EDR, NDR, and SOAR.