Detection Content Manager

The Boston Consulting Group GmbH; Lisboa; Presencial; EUR 60 000 - 85 000; Tempo integral

Resumo da oferta

The Boston Consulting Group GmbH is seeking a Detection Content Specialist to join our Threat Detection and Continuous Monitoring capability. You will translate threats into structured engineering requirements and drive high-confidence detections aligned with the threat landscape.

You will collaborate with Detection Engineering, Security Data Engineering, Threat Intelligence and CSIRT to maintain detection content, ensure traceability, and manage backlogs while contributing to metrics, reports

Qualificações

• Experience developing or managing detection use cases in enterprise security.
• Strong knowledge of MITRE ATT&CK and threat-informed defense principles.
• Experience with SIEM platforms (Splunk ES, Elastic).
• Ability to translate threat scenarios into structured engineering requirements.
• Excellent written communication and documentation skills.
• A structured, engineering-focused approach to maintaining high-quality technical content.

Responsabilidades

• Develop and maintain the Detection Use Case Catalogue.
• Translate approved threat scenarios into actionable detection requirements.
• Maintain mappings between threats, ATT&CK techniques, telemetry requirements and detection use cases.
• Define telemetry requirements for new detection use cases and work with the Security Data Engineer to identify data gaps.
• Maintain the Detection Catalogue, ensuring metadata, ownership, status and documentation remain current.
• Prioritise detection engineering work in partnership with the Director and Senior Detection Engineer.
• Identify gaps in detection coverage and maintain the Detection Gap Register.
• Work with Detection Engineers to ensure detections align with approved use cases and engineering standards.
• Collaborate with Threat Intelligence, Offensive Security and CSIRT to incorporate emerging threats, operational feedback and lessons learned into the detection backlog.
• Support the production of detection coverage metrics, engineering reports and executive heatmaps.
• Contribute to the continuous improvement of detection standards, documentation and engineering processes.

Conhecimentos

MITRE ATT&CK

Threat-informed defense principles

SIEM platforms (Splunk ES, Elastic)

Threat detection catalogue management

Threat intelligence collaboration

Written communication

Engineering backlog management

Ferramentas

Splunk Enterprise Security

Elastic Stack

Descrição da oferta de emprego

Who We Are

Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact.

To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change.

BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures—and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive.

What You’ll Do

As we continue to build our global Threat Detection & Continuous Monitoring capability and we require an experienced Detection Content Specialist to help establish and manage the technical content that drives our Detection Engineering programme.

This role sits between threat intelligence, security operations and detection engineering, ensuring that detection development is driven by well-defined use cases, quality telemetry requirements and measurable security outcomes.

Rather than developing detection logic full-time, you will define, maintain and continuously improve the detection content that enables our Detection Engineers to build high-confidence detections aligned to the organisation's threat landscape.

Working closely with Detection Engineering, Security Data Engineering, CSIRT, Threat Intelligence, Offensive Security and Security Engineering, you will ensure detection content remains threat-led, evidence-based and operationally relevant.

What you will do

As a Detection Content Specialist, you will help build BCG's enterprise detection capability by translating threats into structured engineering requirements that guide detection development.

• Develop and maintain the Detection Use Case Catalogue.
• Translate approved threat scenarios into actionable detection requirements.
• Maintain mappings between threats, ATT&CK techniques, telemetry requirements and detection use cases.
• Define telemetry requirements for new detection use cases and work with the Security Data Engineer to identify data gaps.
• Maintain the Detection Catalogue, ensuring metadata, ownership, status and documentation remain current.
• Prioritise detection engineering work in partnership with the Director and Senior Detection Engineer.
• Identify gaps in detection coverage and maintain the Detection Gap Register.
• Work with Detection Engineers to ensure detections align with approved use cases and engineering standards.
• Collaborate with Threat Intelligence, Offensive Security and CSIRT to incorporate emerging threats, operational feedback and lessons learned into the detection backlog.
• Support the production of detection coverage metrics, engineering reports and executive heatmaps.
• Contribute to the continuous improvement of detection standards, documentation and engineering processes.

What You’ll Bring

Experience developing or managing detection use cases within an enterprise security environment.

• Strong understanding of MITRE ATT&CK and threat-informed defense principles.
• Experience working with SIEM platforms such as Splunk Enterprise Security, Elastic or equivalent.
• Good understanding of enterprise security telemetry and logging requirements.
• Experience translating threat scenarios into structured engineering requirements.
• Strong analytical and organizational skills with the ability to manage large detection catalogues and engineering backlogs.
• Experience working collaboratively with Detection Engineering, Security Operations, Threat Intelligence or Security Engineering teams.
• Excellent written communication and documentation skills.
• A structured, engineering-focused approach to maintaining high-quality technical content.

Who You’ll Work With

You will join BCG's Continuous Monitoring & Threat Detection function and work closely with Detection Engineering, Security Data Engineering, CSIRT, Threat Intelligence, Offensive Security and Security Engineering teams.

You will partner with technical stakeholders across Cybersecurity to ensure detection engineering activities are driven by clearly defined use cases, supported by appropriate telemetry and aligned with the organisation's threat landscape.

Working alongside the Director of Continuous Monitoring & Threat Detection and the Senior Detection Engineer, you will help maintain the technical content, traceability and engineering backlog that underpin BCG's growing detection capability.

Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws.

BCG is an E-Verify Employer. Click here for more information on E-Verify.