Security Content Engineer

BlueVoyant; Maryland; Remote; USD 100,000 - 215,000; Full time

Job summary

Join BlueVoyant as a Security Content Engineer in a fully remote position where you'll develop automated security solutions and work on enhancing security operations. This mid-senior level role requires collaboration, innovation, and an eagerness to tackle sophisticated cybersecurity challenges. Engage closely with clients and internal teams to produce actionable security insights through advanced content engineering.

Benefits

Medical insurance

Vision insurance

401(k)

Disability insurance

Qualifications

• Experience writing detection signatures or algorithms.
• 5+ years in IT/cybersecurity with focus on SIEM.
• Hands-on experience with Microsoft Azure and related tools.

Responsibilities

• Develop detection logic and automation content.
• Enrich security signals to improve SOC efficiency.
• Collaborate with teams to optimize security operations.

Skills

Collaboration

Communication

Detection signatures

Log analysis

Event logs

Cybersecurity

Education

Bachelor's degree in a related field

Tools

Microsoft Azure

Kusto Query Language (KQL)

SIEM/SOAR platforms

Endpoint Detection and Response (EDR)

Job description

Get AI-powered advice on this job and more exclusive features.

Direct message the job poster from BlueVoyant

BlueVoyant is seeking a Security Content Engineer to join our fast-paced team focused on building automated security analysis solutions. This fully remote role involves developing detection logic, automation, and visualizations to help clients derive actionable security insights. You’ll work closely with internal teams and customers to enhance security operations through innovative content engineering.

Key Responsibilities

• Enrich security signals to improve SOC efficiency and outcomes
• Research threat actors and attack vectors to develop detection content for emerging threats
• Design and build automation content for onboarding new products
• Assist clients in testing and tuning detection logic to reduce false positives and alert fatigue
• Identify and promote reusable content (rules, automations, dashboards) across clients
• Collaborate with integration teams to optimize log ingestion and reduce noise
• Deliver research-driven content such as queries, signatures, rules, and knowledge base articles
• Develop supplemental detection coverage for high-risk vulnerabilities and exploits
• Contribute to the evolution of security policies, procedures, and automation frameworks
• Communicate regularly with client IT teams to provide guidance and ensure operational readiness
• Support the development of incident response processes and documentation
• Assist with advancing security standard operating procedures and incident response reporting.

Qualifications

• Strong collaboration and interpersonal skills, especially in distributed team environments
• Excellent written and verbal communication skills; ability to explain complex topics clearly
• Experience in writing detection signatures or algorithms
• Proficiency in analyzing event logs and identifying indicators of compromise
• Hands-on experience with Microsoft Azure, Sentinel, Defender, and related tools
• Familiarity with:
• Kusto Query Language (KQL) or similar
• Complex JSON structures
• Experience in digital forensics and blue team operations
• Solid understanding of network protocols and infrastructure
• Ability to gather client requirements and translate them into technical solutions
• Deep knowledge of:
• SIEM/SOAR platforms
• API integrations
• Endpoint Detection and Response (EDR)
• Log analysis and malware detection
• Network monitoring tools
• Case management systems
• Atlassian Suite (Jira, Confluence)
• Email security, DLP, encryption, and vulnerability management

Preferred Qualifications

• Background in intrusion analysis, detection engineering, or penetration testing
• 5+ years of experience in IT or cybersecurity, with a focus on SIEM and detection content
• Relevant certifications such as Microsoft 365 Certified: Security Administrator Associate, GCFA, GCFE, or OSCP

Education

• Bachelor's degree in a related field or equivalent professional experience and certifications

About BlueVoyant

At BlueVoyant, we recognize that effective cyber security requires active prevention and defense across both your organization and supply chain. Our proprietary data, analytics, and technology, coupled with deep expertise, works as a force multiplier to secure your full ecosystem. Accuracy! Actionability! Timeliness! Scalability!

Led by CEO, Jim Rosenthal, BlueVoyant’s highly skilled team includes former government cyber officials with extensive frontline experience in responding to advanced cyber threats on behalf of the National Security Agency, Federal Bureau of Investigation, Unit 8200, and GCHQ, together with private sector experts. BlueVoyant services utilize large real-time datasets with industry leading analytics and technologies.

Founded in 2017 by Fortune 500 executives, including Executive Chairman, Tom Glocer, and former Government cyber officials, BlueVoyant is headquartered in New York City and has offices in Maryland, Tel Aviv, San Francisco, London, Budapest, and Latin America.

All employees must be authorized to work in the United States. BlueVoyant provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, BlueVoyant complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities.

Disclaimer: Please note that pursuant to contractual requirements and applicable law, in order for employees to perform work on some of the company’s federal contracts, U.S. citizenship is required. Accordingly, an employee’s ability to perform work on such contracts is contingent upon the company’s verification of the employee’s citizenship status. Furthermore, individuals may be subject to additional background checks and fingerprinting.

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Full-time

Job function

• Job function

  Information Technology

• Industries

  Computer and Network Security

Referrals increase your chances of interviewing at BlueVoyant by 2x

Inferred from the description for this job

Medical insurance

Vision insurance

401(k)

Disability insurance

Get notified when a new job is posted.

Sign in to set job alerts for “Content Engineer” roles.

Chevy Chase, MD $105,000.00-$215,000.00 3 hours ago

Maryland, United States $100,000.00-$164,000.00 1 week ago

Lexington Park, MD $125,000.00-$150,000.00 1 day ago

Freelance Screenshot Collector - Italian (US, Remote)

Frontend Accessibility Developer (Remote)

Chevy Chase, MD $65,600.00-$157,850.00 3 days ago

Maryland, United States $73,400.00-$100,100.00 5 hours ago

Maryland, United States $100,000.00-$110,000.00 2 days ago

Columbia, MD $80,000.00-$110,000.00 4 days ago

Business Intelligence Analyst - Tableau - Remote US

Annapolis, MD $70,000.00-$90,000.00 6 hours ago

Software Engineer I with Public Trust Clearance

Maryland, United States $90,000.00-$160,000.00 6 months ago

Maryland, United States $203,800.00-$309,700.00 7 hours ago

Bethesda, MD $90,300.00-$189,600.00 11 hours ago

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.