Senior SIEM & Threat Detection Analyst (Remote)

Trigyn Technologies Limited; United States; Remoto; USD 90.000 - 130.000; Tempo integral

Resumo da vaga

TRIGYN TECHNOLOGIES is seeking a Security Operations Analyst (SIEM Operations and Threat Detection) to join its Cybersecurity Operations Section. The role is remote and involves supporting threat detection, security content management, and monitoring across SIEM, EDR, and cloud platforms for clients and partner organizations.

The successful candidate will develop detections, validate data sources, tune monitoring capabilities, and collaborate with Incident Response and Threat Intelligence teams

Qualificações

• Minimum of five (5) years of relevant IT experience including alert triage and security incidents
• Experience administering a SIEM platform (Splunk or Microsoft Sentinel preferred)
• Proven experience with SOC toolset (SIEMs, EDRs) and performing technical threat analysis

Responsabilidades

• Develop, validate, tune, and maintain security monitoring and detection across SIEM, EDR, cloud, and other platforms
• Operate, maintain, and improve security monitoring and threat detection services
• Onboard, test, validate data sources and telemetry feeds for monitoring capabilities
• Manage security content, use cases, and rule reviews with QA
• Collaborate with threat intel, incident response, and CSOC teams to translate requirements into detections
• Contribute to security architecture reviews and optimization recommendations
• Prepare and present cybersecurity metrics, dashboards, and reports
• Review detections, configurations, and processes for quality and improvements
• Gather feedback to tune detections and reduce false positives
• Support CSOC procedures, standards, and knowledge base documentation
• Produce technical reports and summaries for stakeholders
• Provide ad hoc support as required

Conhecimentos

Excellent communication

Customer-facing experience

Documentation writing

Creativity

Conflict management

Ferramentas

Splunk

Microsoft Sentinel

QRadar

ArcSight

ELK Stack

Defender for Endpoint

CrowdStrike

M365 Defender

Azure Security

Azure Sentinel

XDR

Descrição da vaga

TRIGYN TECHNOLOGIES is seeking a Security Operations Analyst (SIEM Operations and Threat Detection) to join its Cybersecurity Operations Section. The role is remote and involves supporting threat detection, security content management, and monitoring across SIEM, EDR, and cloud platforms for clients and partner organizations.

The successful candidate will develop detections, validate data sources, tune monitoring capabilities, and collaborate with Incident Response and Threat Intelligence teams