Threat Detection Content Architect

Boston Consulting Group; Portugal; Presencial; EUR 70 000 - 90 000; Tempo integral

Resumo da oferta

Boston Consulting Group is seeking an experienced Detection Content Specialist to establish and manage the technical content that drives our Detection Engineering programme within Threat Detection & Continuous Monitoring.

The role sits between threat intelligence, security operations and engineering, ensuring content remains threat-led, evidence-based and operationally relevant, while coordinating telemetry, catalog maintenance and cross‑team collaboration.

Qualificações

• Strong understanding of MITRE ATT&CK and threat-informed defence principles.
• Experience with SIEM platforms such as Splunk Enterprise Security, Microsoft Sentinel, Elastic or equivalents.
• Ability to translate threat scenarios into structured engineering requirements.
• Excellent written communication and documentation skills.
• Structured, engineering-focused approach to maintaining high-quality technical content.

Responsabilidades

• Develop and maintain the Detection Use Case Catalogue.
• Translate approved threat scenarios into actionable detection requirements.
• Maintain mappings between threats, ATT&CK techniques, telemetry requirements and detection use cases.
• Define telemetry requirements for new detection use cases and work with the Security Data Engineer to identify data gaps.
• Maintain the Detection Catalogue, ensuring metadata, ownership, status and documentation remain current.
• Prioritise detection engineering work in partnership with the Director and Senior Detection Engineer.
• Identify gaps in detection coverage and maintain the Detection Gap Register.
• Work with Detection Engineers to ensure detections align with approved use cases and engineering standards.
• Collaborate with Threat Intelligence, Offensive Security and CSIRT to incorporate emerging threats, operational feedback and lessons learned into the detection backlog.
• Support the production of detection coverage metrics, engineering reports and executive heatmaps.
• Contribute to the continuous improvement of detection standards, documentation and engineering processes.

Conhecimentos

MITRE ATT&CK

SIEM platforms

Threat-informed defence

Documentation

Analytical skills

Descrição da oferta de emprego

Boston Consulting Group is seeking an experienced Detection Content Specialist to establish and manage the technical content that drives our Detection Engineering programme within Threat Detection & Continuous Monitoring.

The role sits between threat intelligence, security operations and engineering, ensuring content remains threat-led, evidence-based and operationally relevant, while coordinating telemetry, catalog maintenance and cross‑team collaboration.