{"id":2016613,"url":"https://alion.io/job/bluevoyant-senior-security-content-engineer","title":"Senior Security Content Engineer","company":{"id":1798100,"name":"Bluevoyant","domain":"bluevoyant.com","url":"https://alion.io/company/bluevoyant-com","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Welcome to the Jungle","truth_index":null},"role":"Product","role_family":"Product","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":122000,"max_usd":212000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":561},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"Confluence","optional":false},{"name":"DLP","optional":false},{"name":"Git","optional":false},{"name":"Jira","optional":false},{"name":"Python","optional":false},{"name":"Ruby","optional":false},{"name":"SIEM","optional":false}],"status":"closed","first_seen_at":"2026-09-11T00:05:56Z","employer_posted_date":"2026-10-07","last_verified_at":"2026-10-11T01:55:20Z","board_verified":false,"closed_at":"2026-10-11T01:55:20Z","days_open":30,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":30},"description":"Join BlueVoyant, a leading cybersecurity company, as a Senior Security Content Engineer. In this fully remote role, you will develop automated security analysis solutions, enhance security operations, and improve SOC efficiency. You will work closely with internal teams and customers, conduct research on threat actors and attack vectors, and design complex detection analytic rules. Additionally, you will assist clients in testing and tuning detection logic, perform global tuning for complex alerts, and mentor developing team members.\nMissions\nDevelop detection logic, automation, and visualizations to help clients derive actionable security insights.\nResearch threat actors and attack vectors to develop detection content for emerging threats and improve detection posture.\nDesign and build automation content for onboarding new products, and complex detection analytic rules to improve global detection capabilities.\nProfil recherché\n - Case management systems- Atlassian Suite (Jira and Confluence)\n- API integrations\n- Strong knowledge of:\n- Email security, DLP, encryption, and vulnerability management\n- Excellent written and verbal communication skills, with the ability to explain complex topics clearly\n- Complex JSON data structures\n- Log analysis and malware detection\n- Experience in digital forensics and blue team operations\n- SIEM and SOAR platforms\n- Ability to gather client requirements and translate them into technical solutions\n- Expert scripting skills in Python, Ruby, or similar languages\n- Sentinel Incidents, Workbooks, Hunting Queries, and Notebooks\n- Strong collaboration and interpersonal skills, especially in distributed team environments\n- Endpoint Detection and Response (EDR)\n- Development tools, including Git, IDEs, and CI/CD pipelines\n- Network monitoring tools\n- Hands-on experience with Microsoft Azure, Sentinel, Defender, and related tools\n- Deep experience with:\n- Kusto Query Language (KQL) or similar\n- Expert-level proficiency in analyzing event logs and identifying indicators of compromise\n- Expert understanding of network protocols and infrastructure\n- Expert experience writing detection signatures or algorithms\n- Bachelor's degree in a related field or equivalent professional experience and certifications\n- A Master's degree in Cybersecurity, Computer Science, Information Assurance, or a related technical field is preferred\n- 10+ years of experience in IT or cybersecurity, with a focus on SIEM and detection content\n- Background in intrusion analysis, detection engineering, or penetration testing\n- Relevant certifications such as: Microsoft 365 Certified: Security Administrator Associate, GCFA, GCFE, OSCP","description_format":"text","description_chars":2671,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security"],"lifecycle":[{"event":"open","at":"2026-10-07T13:12:01Z"},{"event":"close","at":"2026-10-11T01:55:20Z"}],"visa":[],"liveness":null,"pay":null,"html_url":"https://alion.io/job/bluevoyant-senior-security-content-engineer","json_url":"https://alion.io/job/bluevoyant-senior-security-content-engineer.json","meta":{"generated_at":"2026-10-11T03:26:04Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":1142,"day_limit":5000,"remaining_today":3858,"minute_limit":60,"resets_at":"2026-10-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1798100},"rest":"https://alion.io/mcp/rest/get_company?id=1798100"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbluevoyant-senior-security-content-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbluevoyant-senior-security-content-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbluevoyant-senior-security-content-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/bluevoyant-senior-security-content-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbluevoyant-senior-security-content-engineer"}]}