Technical Consultant-Threat Detection Content & Administration

Mployee.me; Mumbai; On-site; INR 1,000,000 - 1,500,000; Full time

Job summary

Mployee.me in Mumbai, India seeks a Technical Consultant for Threat Detection Content & Administration to manage security technology infrastructure, deploy use cases, and tune controls for effective threat detection. The role requires evaluating threats with MITRE ATT&CK and NIST frameworks, plus policy development experience.

Ideal candidates hold a Bachelor's (Master's preferred) and have hands-on experience with SIEM, SOAR, EDR, AV, and cloud security controls across enterprise environments.

Qualifications

• Bachelor's degree or higher in a relevant field.
• Experience with managing and maintaining security technology infrastructure including SIEM, SOAR, EDR, AV, and cloud security controls.
• Ability to analyze system and network activity and apply MITRE ATT&CK for attack classification and risk assessment.
• Experience with developing and recommending security policy based on SIEM/EDR/anti-malware/logging policies.
• Experience with tuning and optimizing security controls (SIEM, SOAR, EDR, AV, cloud).
• Experience evaluating threats using the NIST Cybersecurity framework and providing mitigations.

Responsibilities

• Manage and maintain security technology infrastructure and deploy use cases and runbooks to client environments.
• Analyze system and network activity to identify malicious activity using MITRE ATT&CK.
• Develop and recommend security policy based on SIEM/EDR/anti-malware/logging policies.
• Tune and optimize security controls (SIEM, SOAR, EDR, AV, cloud) for efficient threat detection and response.
• Evaluate threat risks using the NIST Cybersecurity framework and provide mitigations.

Skills

Security infrastructure

Threat analysis

Security policy development

Risk assessment

MITRE ATT&CK

NIST framework

Education

Bachelor's degree

Master's degree

Tools

SIEM

SOAR

EDR

AV

Cloud security controls

Job description

Your Role and Responsibilities:

As a Technical Consultant in Threat Detection Content & Administration, you will manage and maintain security technology infrastructure, including SIEM, SOAR, EDR, AV, and Cloud security controls. You will develop and deploy use cases, rules, and security policy recommendations to ensure efficient infrastructure functionality.

Your Primary Responsibilities Will Include:

• Manage Security Infrastructure: Manage and maintain security technology infrastructure, ensuring that systems are patched, upgraded, and functioning efficiently. This includes developing use cases, rules, and run books, and deploying them to the client environment.


• Analyze System Activity: Analyze and translate system and network activity, indicators of compromise, and attacker tactics to identify malicious activity, applying the MITRE ATT&CK framework to classify attacks and assess risk.


• Develop Security Policy: Develop and recommend security policy based on expertise in Security Incident & Event Management (SIEM), Endpoint Detection and Response technology, anti-malware, anti-spam, network security technologies, and general user and network activity logging policies.


• Optimize Security Controls: Tune and optimize security controls, including SIEM, SOAR, EDR, AV, and Cloud security controls, to ensure efficient threat detection and response.


• Evaluate Risk: Evaluate the risk of threats using the NIST Cybersecurity framework and provide recommendations to mitigate identified risks.

Required Education:

Bachelor's Degree

Preferred Education:

Master's Degree

Required Technical and Professional Expertise:

• Security Technology Infrastructure Management: Experience with managing and maintaining security technology infrastructure, including SIEM, SOAR, EDR, AV, and Cloud security controls, ensuring systems are patched, upgraded, and functioning efficiently.


• Threat Analysis and Mitigation: Experience with analyzing and translating system and network activity, indicators of compromise, and attacker tactics to identify malicious activity, utilizing frameworks such as MITRE ATT&CK for attack classification and risk assessment.


• Security Policy Development: Experience with developing and recommending security policy based on expertise in Security Incident & Event Management (SIEM), Endpoint Detection and Response technology, anti-malware, anti-spam, network security technologies, and general user and network activity logging policies.


• Security Control Optimization: Experience with tuning and optimizing security controls, including SIEM, SOAR, EDR, AV, and Cloud security controls, to ensure efficient threat detection and response.


• Risk Evaluation and Mitigation: Experience with evaluating the risk of threats using the NIST Cybersecurity framework and providing recommendations to mitigate identified risks.

Preferred Technical and Professional Experience:

• Proficiency in NIST Framework: Experience with utilizing the NIST Cybersecurity framework to evaluate the risk of threats and provide recommendations to mitigate identified risks.


• MITRE ATT&CK Framework Knowledge: Experience with applying the MITRE ATT&CK framework to classify attacks, identify attack attribution, and assess risk.


• Cloud Security Controls Expertise: Experience with managing and maintaining cloud security controls to ensure efficient threat detection and response.

Years of Experience:

8 - 10