Threat Detection Content Architect

The Boston Consulting Group GmbH; Lisboa; Presencial; EUR 60 000 - 85 000; Tempo integral

Resumo da oferta

The Boston Consulting Group GmbH is seeking a Detection Content Specialist to join our Threat Detection and Continuous Monitoring capability. You will translate threats into structured engineering requirements and drive high-confidence detections aligned with the threat landscape.

You will collaborate with Detection Engineering, Security Data Engineering, Threat Intelligence and CSIRT to maintain detection content, ensure traceability, and manage backlogs while contributing to metrics, reports

Qualificações

• Experience developing or managing detection use cases in enterprise security.
• Strong knowledge of MITRE ATT&CK and threat-informed defense principles.
• Experience with SIEM platforms (Splunk ES, Elastic).
• Ability to translate threat scenarios into structured engineering requirements.
• Excellent written communication and documentation skills.
• A structured, engineering-focused approach to maintaining high-quality technical content.

Responsabilidades

• Develop and maintain the Detection Use Case Catalogue.
• Translate approved threat scenarios into actionable detection requirements.
• Maintain mappings between threats, ATT&CK techniques, telemetry requirements and detection use cases.
• Define telemetry requirements for new detection use cases and work with the Security Data Engineer to identify data gaps.
• Maintain the Detection Catalogue, ensuring metadata, ownership, status and documentation remain current.
• Prioritise detection engineering work in partnership with the Director and Senior Detection Engineer.
• Identify gaps in detection coverage and maintain the Detection Gap Register.
• Work with Detection Engineers to ensure detections align with approved use cases and engineering standards.
• Collaborate with Threat Intelligence, Offensive Security and CSIRT to incorporate emerging threats, operational feedback and lessons learned into the detection backlog.
• Support the production of detection coverage metrics, engineering reports and executive heatmaps.
• Contribute to the continuous improvement of detection standards, documentation and engineering processes.

Conhecimentos

MITRE ATT&CK

Threat-informed defense principles

SIEM platforms (Splunk ES, Elastic)

Threat detection catalogue management

Threat intelligence collaboration

Written communication

Engineering backlog management

Ferramentas

Splunk Enterprise Security

Elastic Stack

Descrição da oferta de emprego

The Boston Consulting Group GmbH is seeking a Detection Content Specialist to join our Threat Detection and Continuous Monitoring capability. You will translate threats into structured engineering requirements and drive high-confidence detections aligned with the threat landscape.

You will collaborate with Detection Engineering, Security Data Engineering, Threat Intelligence and CSIRT to maintain detection content, ensure traceability, and manage backlogs while contributing to metrics, reports