Senior SIEM & Threat Detection Analyst (Remote)

Trigyn Technologies Limited; United States; Remote; USD 90,000 - 130,000; Full time

Job summary

TRIGYN TECHNOLOGIES is seeking a Security Operations Analyst (SIEM Operations and Threat Detection) to join its Cybersecurity Operations Section. The role is remote and involves supporting threat detection, security content management, and monitoring across SIEM, EDR, and cloud platforms for clients and partner organizations.

The successful candidate will develop detections, validate data sources, tune monitoring capabilities, and collaborate with Incident Response and Threat Intelligence teams

Qualifications

• Minimum of five (5) years of relevant IT experience including alert triage and security incidents
• Experience administering a SIEM platform (Splunk or Microsoft Sentinel preferred)
• Proven experience with SOC toolset (SIEMs, EDRs) and performing technical threat analysis

Responsibilities

• Develop, validate, tune, and maintain security monitoring and detection across SIEM, EDR, cloud, and other platforms
• Operate, maintain, and improve security monitoring and threat detection services
• Onboard, test, validate data sources and telemetry feeds for monitoring capabilities
• Manage security content, use cases, and rule reviews with QA
• Collaborate with threat intel, incident response, and CSOC teams to translate requirements into detections
• Contribute to security architecture reviews and optimization recommendations
• Prepare and present cybersecurity metrics, dashboards, and reports
• Review detections, configurations, and processes for quality and improvements
• Gather feedback to tune detections and reduce false positives
• Support CSOC procedures, standards, and knowledge base documentation
• Produce technical reports and summaries for stakeholders
• Provide ad hoc support as required

Skills

Excellent communication

Customer-facing experience

Documentation writing

Creativity

Conflict management

Tools

Splunk

Microsoft Sentinel

QRadar

ArcSight

ELK Stack

Defender for Endpoint

CrowdStrike

M365 Defender

Azure Security

Azure Sentinel

XDR

Job description

TRIGYN TECHNOLOGIES is seeking a Security Operations Analyst (SIEM Operations and Threat Detection) to join its Cybersecurity Operations Section. The role is remote and involves supporting threat detection, security content management, and monitoring across SIEM, EDR, and cloud platforms for clients and partner organizations.

The successful candidate will develop detections, validate data sources, tune monitoring capabilities, and collaborate with Incident Response and Threat Intelligence teams