Cyber Operations Content Development Engineer

# Applicant Portal:## Job Details:
Cyber Operations Content Development Engineer|  | Cyber Operations Content Development Engineer ||  |  || We’ve been on a mission to improve end user satisfaction since the day we were founded over 25 years ago. As champions of premium experience-led IT services, it is who we are. We constantly challenge old assumptions and inherited wisdom, and demonstrate there are other, better ways to do things.
Based in the UK, with offices globally USA, South Africa, Sri Lanka, Kuala Lumpur and Macedonia, we now provide a huge range of market-leading managed services, Microsoft-centric business software and cloud solutions to over 300 ambitious mid-market organisations. And in response to our customers’ changing needs, and the growing threats we all face, we’ve massively strengthened our well-established cyber security capabilities.
Our mission is to unleash the potential of people through amazing IT experiences.
Our Values    At Acora, we’re proud to share the values we live by. They’re not dusty abstract concepts. Our values define our culture: they act as a promise to our customers and a constant challenge to ourselves, both as individuals and as a team, to be Game-Changers.

• Be the best you can be    
• We do what we say    
• Together we win ||  | We are seeking a skilled Cyber Operations Engineer to join our dynamic team and contribute to our mission of safeguarding our customers critical information. The role will support the Acora SOC workbench building and maintaining both our tooling and integrations critical to the operations we provide to our customers.
Working within a skilled team your input and experience will help build on our existing capabilities, adjusting to the threat landscape and needs of our customers. SIEM and SOAR experience along with coding knowledge is required along with a good security understanding considerations to rule and playbook tuning. ||  | Security Information and Event Management (SIEM):  
• Deployment, maintenance and management of SIEM solutions  
• Collaborate in the development and management of correlation rules for SIEM and EDR platforms.  
• Experience working with YARA-L desirable.  
• Previous security experience and knowledge on rule tuning.  
• Dashboard creation, previous experience of Looker is desirable  
• Support log ingestion to SIEM  
• Parser validation, development and management.  
• Support the creation of basic analyst steps for investigations    Security Orchestration, Automation, and Response (SOAR):  
• Maintenance and support of SOAR.  
• Development and management of Playbooks, Connectors, Automated Job, integrations and custom views  
• Experience with Python for integrations/Playbook actions; HTML, JS, CSS for custom views.  
• Experience working with APIs.  
• Creation of documentation on generation of required keys and permissions for integrations  
• User account management  
• Testing out-of-the-box integrations new or updated in development environment    Endpoint Detection and Response (EDR):  
• Develop, deploy and manage correlation rules for EDRs  
• Understanding of the technology  
• Automation and playbooks from SOAR  
• Previous experience and familiarity with SOC environment    Coding:  
• Utilize coding skills to develop custom scripts and tools for security automation and enhancement.  
• Creation of scripts and queries to support SOC to include reporting, customer queries and analyst support
-utilising Python and Big Query  
• Troubleshooting products on behalf of vendors ||  |
• Bachelor’s degree in computer science, Information Security, or a related field.  
• Proven experience in SIEM, SOAR, EDR, and other security technologies.  
• Strong coding skills in languages such as Python, Big Query, or similar.  
• Experience with API development and integration.  
• Experience with cloud security platforms.  
• Familiar with development of playbooks and detection rules.  
• Knowledge of security best practices and frameworks. ||  |
• Excellent problem-solving and analytical skills.  
• Strong communication and teamwork abilities. |
#J-18808-Ljbffr