Senior Security Content Engineer
Confirmed on the employer's own hiring board on Oct 16, 2026. First seen by Alion on Oct 16, 2026.
Join BlueVoyant as a Senior Security Content Engineer in a fully remote role. You will develop automated security analysis solutions, enhance security operations, and improve SOC efficiency. Your responsibilities will include researching threat actors, designing detection analytic rules, assisting clients in testing detection logic, and mentoring team members. You will also have access to a comprehensive benefits package, including medical, dental, and vision coverage, retirement plans, and generous paid time off.
Missions
- Concevoir et construire des règles d'analyse de détection complexes, améliorant nos capacités de détection à l'échelle mondiale.
- Rechercher des acteurs de la menace et des vecteurs d'attaque pour développer du contenu de détection pour les menaces émergentes.
- Identifier et promouvoir du contenu réutilisable, y compris des règles, des automatisations et des tableaux de bord, auprès des clients.
Profil recherché
- Ability to gather client requirements and translate them into technical solutions- Log analysis and malware detection
- Email security, DLP, encryption, and vulnerability management
- Kusto Query Language (KQL) or similar
- Complex JSON data structures
- Experience in digital forensics and blue team operations
- Sentinel Incidents, Workbooks, Hunting Queries, and Notebooks
- Case management systems
- Strong knowledge of:
- Atlassian Suite (Jira and Confluence)
- Excellent written and verbal communication skills, with the ability to explain complex topics clearly
- SIEM and SOAR platforms
- Expert-level proficiency in analyzing event logs and identifying indicators of compromise
- Expert experience writing detection signatures or algorithms
- Expert understanding of network protocols and infrastructure
- Network monitoring tools
- Development tools, including Git, IDEs, and CI/CD pipelines
- Deep experience with:
- API integrations
- Expert scripting skills in Python, Ruby, or similar languages
- Strong collaboration and interpersonal skills, especially in distributed team environments
- Hands-on experience with Microsoft Azure, Sentinel, Defender, and related tools
- Endpoint Detection and Response (EDR)
- Bachelor's degree in a related field or equivalent professional experience and certifications
- A Master's degree in Cybersecurity, Computer Science, Information Assurance, or a related technical field is preferred
- Relevant certifications such as: Microsoft 365 Certified: Security Administrator Associate, GCFA, GCFE, OSCP
- Background in intrusion analysis, detection engineering, or penetration testing
- 10+ years of experience in IT or cybersecurity, with a focus on SIEM and detection content