Job Description

Content Developer – ArcSight

Location: Remote

Rate: £500 per day | Outside IR35

Contract Length: 6-month contract

We're looking for an experienced Content Developer with hands-on ArcSight and/or Google SecOps experience to support a cybersecurity-focused project on an initial six-month contract.

This is a remote opportunity for a technical professional with experience developing and maintaining security content within Security Information and Event Management (SIEM)

platforms.

The Role

You'll be working with security content used to identify suspicious activity, detect potential threats and support security operations. The role is expected to involve developing and maintaining detection logic, security use cases and related SIEM content.

Depending on your experience, this may include developing detection rules, creating correlation logic, tuning existing content and supporting the adaptation or migration of content between security platforms.

Key Experience

• Hands-on experience with ArcSight and/or Google Security Operations (Google SecOps / Chronicle).
• Experience developing or maintaining SIEM security content.
• Understanding of security detection rules, correlation logic and detection use cases.
• Knowledge of security monitoring, threat detection and SOC operations.
• Ability to work independently in a remote project environment.

Experience with detection rule development, threat detection engineering and SIEM content migration would be beneficial.