Information Security Developer / Engineer

Information Security Developer / Engineer Primary Responsibilities  Author and maintain a set of correlation and threat hunting rules that produce alerts/incidents for SOC review.  Create automations from static threat intelligence and dynamic machine learning capabilities to monitor the performance of the ruleset (false positives/false negatives).  Advise how performance of these rules might be improved through the use of additional enrichment data sources, analysis techniques, or other tuning practises. Minimal proofs of concept may also be required depending on the level of engineering effort required to enact the advice provided.  Integrate rules and their corresponding incidents with a proprietary severity scoring model for SOC prioritisation.  Plan, test, and codify remediation guidance for each threat or threats detected by a rule. This should always include human-readable steps for manual remediation, but may also include scripted or otherwise automated remediation steps.  Create full lifecycle integration tests for rules and remediation steps. Desired Skills Experience with modern security Tools, Techniques, and Procedures (TTPs), specifically: o Threat intelligence exchanges, their contents, and integration techniques, such as IOCs, YARA rules, STIX/TAXII, etc. o SIEM and SOAR platforms o Endpoint automation tools such as Consul, Ansible, Chef, etc. Familiarity with major cloud providers, such as Microsoft Azure, Amazon Web Services, and Google Cloud Platform. Familiarity with virtualisation and containerisation technologies such as VTx and LXC/Docker. Experience in a software development lifecycle, specifically one based on Agile (Scrum or Kanban). Experience writing and managing sustainable software solutions in one or more of these ecosystems: o Python 3 o Go o .NET Framework (C#/F#) Familiarity with log aggregation or data lake platforms. Familiarity with streaming analytics tools such as Spark or Flume. Familiarity with big data modelling and querying techniques such as map/reduce.