Remote Threat Detection Content Engineer

State Street; Kilkenny; On-site; EUR 75,000 - 115,000; Full time

Job summary

State Street seeks a Security Content Specialist to design, test, and document threat detection across SIEM/EDR platforms. You will onboard content, tune rules, and ensure detections stay current while coordinating with threat intelligence and purple teams.

Candidates should have 3+ years in cyber security roles, strong scripting skills, and be adept at documenting work in Confluence. Remote work options may be considered for highly skilled candidates.

Qualifications

• BS in Cyber Security, Information Technology or Computer Science or relevant experience.
• +3 years in cyber security roles such as SIEM/EDR content engineering, incident response, SOC tier 3, threat hunting or related duties.

Responsibilities

• Onboard and maintain threat content and detection rules, avoiding duplication.
• Test, tune and validate threat detection use cases in SIEM/EDR platforms.
• Collaborate with Threat Intelligence to align detection with MITRE ATT&CK.
• Document testing results and processes in Confluence; manage Jira tickets.
• Maintain SIEM/EDR assets, tables and detection content integrity.

Education

BS in Cyber Security

Information Technology

Computer Science

Tools

Jira

Confluence

Python

PowerShell

Perl

Job description

State Street seeks a Security Content Specialist to design, test, and document threat detection across SIEM/EDR platforms. You will onboard content, tune rules, and ensure detections stay current while coordinating with threat intelligence and purple teams.

Candidates should have 3+ years in cyber security roles, strong scripting skills, and be adept at documenting work in Confluence. Remote work options may be considered for highly skilled candidates.