SIEM Content Development Specialist - VOIS

The SIEM Content Development Specialist contributes to the Cyber Security Operations Centre (CSOC) detection capability within Cyber Defence, translating business requirements and threat intelligence into effective detection content. The role focuses on developing, tuning, and improving SIEM, EDR, and XDR detection capabilities, with an emphasis on Elastic Security/ELK, KQL, ES|QL, and Regex. This individual contributor role requires at least 6 years of relevant experience in security operations, SIEM content development, security engineering, threat hunting, or threat intelligence.