Security Operation SIEM Consultant

About the role As a member of the Cyber Intelligence & Security Operations Center (CISOC) team, you will focus on security monitoring. You will have hands-on experience improving monitoring and detection capabilities by leveraging SIEM/XDR technologies and working with various teams to remediate identified risks. Key responsibilities Implement new security use cases on the SIEM/XDR Use case fine-tuning to decrease the ratio of false positives Implement new scripts and integrations to leverage and/or enrich SIEM/XDR technologies Maintenance of existing scripts and integrations Support the implementation and maintenance of simulated threats to automatically test and enhance use cases Evolve current technologies according to defined roadmap Collaborate on the improvement of the security detection capabilities with Security Detection and Incident Response team Act as point of contact for managing & delivering various reports & dashboards Work with various risk & information security teams in presenting security monitoring status & updates to technology subject matter experts & management About you Proven experience in development of security use cases for SIEM/XDR technologies such as Splunk Enterprise Security, Microsoft Sentinel or Microsoft Defender Programming experience in scripting languages (Python, PowerShell, Bash) and API integration Desired experience in BAS (breach & attack simulation) threat creation Proven experience in reporting/ticketing platforms like ServiceNow Knowledge of common security weaknesses including remediation processes, prioritization, change management, analysis, & triage Excellent spoken and written English Experience working in a virtual, international and multicultural environment Analytical thinking, good communication, problem solving, results oriented, agility and teamwork skills