Cyber Security - Detection Content Lead
| Dyddiad hysbysebu: | 28 Awst 2025 |
|---|---|
| Cyflog: | £60,300 bob blwyddyn |
| Oriau: | Llawn Amser |
| Dyddiad cau: | 10 Medi 2025 |
| Lleoliad: | Manchester, Greater Manchester |
| Gweithio o bell: | Hybrid - gweithio o bell hyd at 2 ddiwrnod yr wythnos |
| Cwmni: | Government Recruitment Service |
| Math o swydd: | Parhaol |
| Cyfeirnod swydd: | 422793 |
Crynodeb
The Detection Content Lead sets the strategy for developing and maintaining detection rules across security tools. This role blends technical expertise in threats and adversaries with hands-on experience in tooling, data ingestion, and rule deployment. The post holder leads a team of detection engineers and works closely with threat, monitoring, and onboarding teams to deliver high-quality, scalable, and actionable detection content aligned with adversary techniques.
Your day-today responsibilities will be to:
Design, test, and document detection rules to ensure effective coverage with minimal false positives.
Prioritise rule deployment based on threat relevance, data quality, and system performance.
Define and maintain a detection strategy aligned with evolving threats, regularly reviewing coverage and proposing improvements.
Coordinate across threat, monitoring, incident response, onboarding, and engineering teams to align efforts and track progress.
Recommend tooling enhancements, including integrations, technical add-ons, automation, and detection-as-code solutions.
Manage the full content lifecycle—from creation to tuning—ensuring version control and documentation are maintained.
Lead the Detection Content team, aligning work with CSOC operations and supporting the broader Threat Operations strategy.
Due to the requirements of the role, the successful candidates will be required to work full-time (37 hours per week).
Your day-today responsibilities will be to:
Design, test, and document detection rules to ensure effective coverage with minimal false positives.
Prioritise rule deployment based on threat relevance, data quality, and system performance.
Define and maintain a detection strategy aligned with evolving threats, regularly reviewing coverage and proposing improvements.
Coordinate across threat, monitoring, incident response, onboarding, and engineering teams to align efforts and track progress.
Recommend tooling enhancements, including integrations, technical add-ons, automation, and detection-as-code solutions.
Manage the full content lifecycle—from creation to tuning—ensuring version control and documentation are maintained.
Lead the Detection Content team, aligning work with CSOC operations and supporting the broader Threat Operations strategy.
Due to the requirements of the role, the successful candidates will be required to work full-time (37 hours per week).
Aelod balch o'r cynllun cyflogwyr Hyderus o ran Anabledd
Hyderus o ran Anabledd
Gwybodaeth am Hyderus o ran Anabledd
Yn gyffredinol, bydd cyflogwr Hyderus o ran Anabledd yn cynnig cyfweliad i unrhyw ymgeisydd sy'n datgan eu bod yn anabl ac yn bodloni'r meini prawf lleiaf ar gyfer y swydd fel y diffinnir gan y cyflogwr. Mae'n bwysig nodi, mewn rhai sefyllfaoedd recriwtio fel nifer fawr o ymgeiswyr, cyfnod tymhorol ac amseroedd prysur iawn, efallai y bydd y cyflogwr am gyfyngu ar y niferoedd cyffredinol o gyfweliadau a gynigir i bobl anabl a phobl nad ydynt yn anabl. Am fwy o fanylion ewch i Hyderus o ran Anabledd.