Role:
~ Supporting the detection engineering lifecycle, including modelling, data onboarding, detection opportunity identification, detection development, detection deployment and testing/tuning.
Skills:
Recent Detection Engineering experience of at least 2 years
High degree of competency in KQL:
Understanding the structure of KQL queries, where efficiencies can be gained, best practices and how to build detection logic
Highly proficient in Splunk to at least Power User level
Good understanding of Mitre Attack framework and experience of referencing and building content to the framework.
Familiar with GitHub technologies and CI/CD practices.
Good enterprise level understanding of Windows and Linux based operating systems, their management and any hardening or security controls.
This role is inside IR35 and predominantly remote, although occasional onsite travel is required