{"id":2666985,"url":"https://alion.io/job/bluevoyant-senior-security-content-engineer-2","title":"Senior Security Content Engineer","company":{"id":1798100,"name":"Bluevoyant","domain":"bluevoyant.com","url":"https://alion.io/company/bluevoyant-com","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Welcome to the Jungle","truth_index":null},"role":"Product","role_family":"Product","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United Kingdom"],"countries":["GB"],"hiring_countries":["GB"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":91000,"max_usd":150000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":15},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"Confluence","optional":false},{"name":"DLP","optional":false},{"name":"Git","optional":false},{"name":"Jira","optional":false},{"name":"Python","optional":false},{"name":"Ruby","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-10-16T00:06:18Z","employer_posted_date":"2026-10-16","last_verified_at":"2026-10-16T02:58:56Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Join BlueVoyant as a Senior Security Content Engineer in a fully remote role. You will develop automated security analysis solutions, enhance security operations, and improve SOC efficiency. Your responsibilities will include researching threat actors, designing detection analytic rules, assisting clients in testing detection logic, and mentoring team members. You will also have access to a comprehensive benefits package, including medical, dental, and vision coverage, retirement plans, and generous paid time off.\nMissions\nConcevoir et construire des règles d'analyse de détection complexes, améliorant nos capacités de détection à l'échelle mondiale.\nRechercher des acteurs de la menace et des vecteurs d'attaque pour développer du contenu de détection pour les menaces émergentes.\nIdentifier et promouvoir du contenu réutilisable, y compris des règles, des automatisations et des tableaux de bord, auprès des clients.\nProfil recherché\n - Ability to gather client requirements and translate them into technical solutions- Log analysis and malware detection\n- Email security, DLP, encryption, and vulnerability management\n- Kusto Query Language (KQL) or similar\n- Complex JSON data structures\n- Experience in digital forensics and blue team operations\n- Sentinel Incidents, Workbooks, Hunting Queries, and Notebooks\n- Case management systems\n- Strong knowledge of:\n- Atlassian Suite (Jira and Confluence)\n- Excellent written and verbal communication skills, with the ability to explain complex topics clearly\n- SIEM and SOAR platforms\n- Expert-level proficiency in analyzing event logs and identifying indicators of compromise\n- Expert experience writing detection signatures or algorithms\n- Expert understanding of network protocols and infrastructure\n- Network monitoring tools\n- Development tools, including Git, IDEs, and CI/CD pipelines\n- Deep experience with:\n- API integrations\n- Expert scripting skills in Python, Ruby, or similar languages\n- Strong collaboration and interpersonal skills, especially in distributed team environments\n- Hands-on experience with Microsoft Azure, Sentinel, Defender, and related tools\n- Endpoint Detection and Response (EDR)\n- Bachelor's degree in a related field or equivalent professional experience and certifications\n- A Master's degree in Cybersecurity, Computer Science, Information Assurance, or a related technical field is preferred\n- Relevant certifications such as: Microsoft 365 Certified: Security Administrator Associate, GCFA, GCFE, OSCP\n- Background in intrusion analysis, detection engineering, or penetration testing\n- 10+ years of experience in IT or cybersecurity, with a focus on SIEM and detection content","description_format":"text","description_chars":2672,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":["Retirement plans"],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Security Operations","Managed Security"],"lifecycle":[{"event":"open","at":"2026-10-16T02:58:56Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"evidence":"Licensed UK visa sponsor (Skilled Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Skilled Worker","cap_exempt":false,"checked_at":"2026-10-16T06:21:30+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":29,"reasons":["conf:2","win:early"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/bluevoyant-senior-security-content-engineer-2","json_url":"https://alion.io/job/bluevoyant-senior-security-content-engineer-2.json","meta":{"generated_at":"2026-10-16T06:37:06Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4398,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1798100},"rest":"https://alion.io/mcp/rest/get_company?id=1798100"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbluevoyant-senior-security-content-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbluevoyant-senior-security-content-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbluevoyant-senior-security-content-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/bluevoyant-senior-security-content-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbluevoyant-senior-security-content-engineer-2"}]}