THIS IS NOT A 100% REMOTE ROLE; CANDIDATE MUST BE WILLING TO WORK FROM OFFICE (GURGAON) WHEN REQUIRED
About The Position
Our client is a cybersecurity technology innovator with a vision to empower organizations across the globe to quickly, efficiently, and cost-effectively ready themselves to address omnipresent cyber risk. Built off years of Israeli cybersecurity experience, we are looking to offer the broadest managed detection and response offering available today.
What you will do:
Develop extension packages for various platform offerings which entails developing:
• Kibana dashboards
• Regular Expressions and JSON based parsing rules
• Lucene and regular expression-based alerts
• Elasticsearch fields mapping
• Support various integrations – third party security tools, various security related telemetry, alerting and orchestration systems, custom workflows, etc.
Requirements:
• 3-7 yrs experience with ideally an Engineering background
• Strong knowledge of the logs structure of various security related services such as firewalls, WAFs, web services, cloud services such as AWS CloudTrail, Guard Duty, SAAS platforms such as GitHub, GitLab, Google Workspace, Office365, etc.
• Strong Knowledge of Elasticsearch and Kibana
• Strong knowledge and experience with containerized applications and especially microservices is a big plus
• Keen and eager to learn
• learn on your own about security, observability, log types, regular expressions and more
_0.png)
