Security Content Specialist, Assistant Vice President

VulnU; Kilkenny; Remote; EUR 110,000 - 170,000; Full time

Benefits offered by this job

Retirement match

Equity

Job summary

State Street seeks a Security Content Specialist to help create, test, and document threat detection within SIEM/EDR platforms. You will support onboarding of new content, validate existing detections, and work with threat intelligence to align detection strategy with MITRE ATT&CK framework.

Remote work options may be available for highly skilled candidates. You will collaborate with cross-functional teams to maintain content quality, run agile processes in Jira/Confluence, and contribute to a

Qualifications

• BS in Cyber Security, Information Technology, Computer Science or related field.
• Minimum 3 years in a cyber security role focused on SIEM/EDR content engineering, incident response, SOC tier 3, threat hunting or related areas.
• Knowledge of adversarial tactics, techniques, and procedures; ability to design detective controls.
• Experience with scripting or software development (Perl, Python, PowerShell, etc.).
• Security certifications such as GMON, GCDA, GCIH or equivalent are a plus.

Responsibilities

• Assist onboarding of new content and detection rules for SIEM/EDR platforms and validate existing detections to reduce duplication.
• Support bug tracking, prioritization, and agile workflow through Jira and Confluence.
• Test and tune threat detection use cases with Security Content Engineers and aligned MITRE ATT&CK framework.
• Monitor, maintain and refresh look-up tables and content, ensuring accuracy and timeliness.
• Collaborate with Threat Intelligence, IT, and security teams to align detection goals with risk models and enterprise policies.

Job description

# Security Content Specialist, Assistant Vice PresidentState StreetCategory: Threat IntelligenceLocation: Kilkenny, IrelandLevel: Director / VP## Quality of lifeWhat the posting states. Hover or tap a perk to see the line it came from.* Retirement match* EquityWho we are looking forState Street seeks to recruit Security Content Specialist that will assist in creating, testing, enhancing, documenting threat detection to validate cyber detection activity. Join us in evolving our threat management capabilities to shape a pro-active threat intelligence driven fusion model to protect State Street, its customers and partners from the ever evolving and sophisticated global threat actors. Remote work options will be considered for the highly skilled candidates. What will you be responsible for:Assist on boarding of new content and detection rules. Keeping an eye on existing detection and limit duplicative content.Assist in prioritizing and managing bug tracking.Assist Security Content Engineers to test and tune threat detection use cases within the SIEM and EDR platforms.Monitor and maintain SIEM look up tables and various other tables from becoming stale and dated.Monitor established content for metrics, efficiency possible retirement.Validate and document testing through Confluence to advance content to production.Document and maintain assets, scripts and processes to test SIEM/EDR rules for reuse.Partner with Threat Intelligence to align detection strategy with threat model and MITRE ATT&CK framework.Partner with purple team, various security, risk, IT and business professionals to validate and document threat detection goals.Participate in alert creation in various security controls such as EDR, IDS, Cloud, email gateways, etc. Analyze, influence, and recommend.Document maintain a library of other IT groups processes, naming conventions and privileged accounts.Work through Jira tickets in an agile work environment and document processes in Confluence.What we value:An agile development life cycle.Thorough documentation and lifecycle.Experience testing, tuning and validating threat detection alerts/reports.Knowledge of adversarial tactics, techniques, and procedures - ability to create detective controls.Knowledge of cyber threat intelligence. Knowledge of IT architecture and operations (computing, network, storage & cloud).Knowledge of security control technologies.Education & Preferred QualificationsBS in Cyber Security, Information Technology, Computer Science or relevant experience3 years in a cyber security skill role – SIEM/EDR Content Engineer, Incident Response, SOC Tier 3 Analyst, Threat Hunter, Penetration testing, etc.Additional RequirementsFinancial Services experience a plus.Software development and/or scripting experience a plus: PERL, Python, Powershell, etc.Technical security certifications a plus – GMON, GCDA, GCIH, etc.