What will you do?
As a Sr. Cloud Detection Engineer, you will lead the development of out-of-the-box detection rules that leverage cloud data sources to bolster our XDR capabilities. Your role will involve collaborating with cross-functional teams to ensure that rules are aligned with cloud security best practices, integrating with cloud-native services, and providing cutting-edge threat detection solutions.
You will be responsible for the following:
Lead the development of default rules that harness cloud data sources for threat detection.
Ensure that rules are optimized for cloud-native environments such as AWS, Azure, and GCP.
Develop strategies for correlating detection events across multiple cloud platforms, enhancing the efficiency and effectiveness of detection rules.
Conduct rigorous analysis of false positives associated with cloud-specific rules.
Implement automated testing procedures to ensure robustness and coverage of detections.
Contribute to optimization efforts to minimize false positives and enhance rule accuracy in cloud environments.
Stay current with cloud security best practices, industry trends, and emerging technologies.
Maintain comprehensive documentation for cloud-specific default rules.
Share knowledge and best practices with team members to foster continuous learning.
Proven experience in rule development for XDR or similar platforms, with a specific focus on leveraging cloud data sources.
Strong understanding of cloud-native environments, APIs, and services (AWS, Azure, GCP) and their logs (CloudTrail as an example)
Proficiency in scripting languages, including Python, for rule development and automation.
Familiarity with cloud security best practices, frameworks, and compliance standards.
Excellent analytical, problem-solving, and communication skills.
Strong understanding of cloud native attack techniques
