SIEM Detection Engineer — SOC Analysis & Rule Tuning

The HT Group; Austin (TX); Presencial; USD 76.000 - 124.000; A tiempo parcial

Descripción de la vacante

The HT Group is seeking experienced SOC Analysts for a contract opportunity in Austin, TX. This role focuses on strengthening cybersecurity operations by developing and tuning SIEM detection rules within an Elastic/SIEM environment.

Ideal candidates have hands-on experience in SOC, SIEM rule development, and incident investigation, with familiarity with Elasticsearch, Splunk, Microsoft Sentinel, or QRadar. You will work with IT teams to improve monitoring and threat detection.

Formación

• Hands-on experience in a SOC or security monitoring environment.
• Proven ability to create, implement and tune SIEM detection rules.
• Experience with SIEM platforms such as Elasticsearch, Splunk, Microsoft Sentinel, or QRadar.
• Strong understanding of security logs, event correlation, threat detection and incident investigation.
• Ability to work with technical teams and clearly communicate security findings.

Responsabilidades

• Develop, configure, test, and implement new SIEM detection and correlation rules to identify cybersecurity threats.
• Review, maintain, and optimize existing detection rules to improve accuracy and reduce false positives.
• Analyze security logs, alerts, and events to identify suspicious activity, security incidents, and potential vulnerabilities.
• Monitor security events and support threat detection, investigation, and incident response activities.
• Work with Elasticsearch and other SIEM technologies to enhance security visibility and detection capabilities.
• Develop and refine security queries, alerting logic, and correlation rules.
• Collaborate with cybersecurity and IT teams to improve security monitoring processes and incident detection.
• Document detection rules, investigation findings, and recommended security improvements.
• Stay current with emerging cybersecurity threats, attack techniques, and detection best practices.

Conocimientos

SOC operations

SIEM rule tuning

Threat analysis

Incident investigation

Communication

Herramientas

Elasticsearch

Splunk

Microsoft Sentinel

QRadar

Descripción del empleo

The HT Group is seeking experienced SOC Analysts for a contract opportunity in Austin, TX. This role focuses on strengthening cybersecurity operations by developing and tuning SIEM detection rules within an Elastic/SIEM environment.

Ideal candidates have hands-on experience in SOC, SIEM rule development, and incident investigation, with familiarity with Elasticsearch, Splunk, Microsoft Sentinel, or QRadar. You will work with IT teams to improve monitoring and threat detection.