Overview
Develop, test, tune, and maintain SIEM detection rules, correlation logic, dashboards, and alert thresholds. Integrate security tools and services using APIs, webhooks, scripts, and automation platforms. Analyze logs and telemetry to identify suspicious or malicious activity, assess impact, and determine the appropriate response. Monitor, triage, and investigate security alerts from SIEM, EDR, cloud, identity, email, and network-security platforms. Build and enhance SOAR playbooks to automate alert enrichment, investigation, case management, notifications, and approved containment actions. Validate SIEM data coverage, log quality, parsing, ingestion health, and retention across security-relevant systems. Collaborate with IT, cloud, infrastructure, identity, network, and engineering teams to contain incidents and drive remediation. Create and maintain incident-response runbooks, investiga
Full job description
What Will Your Job Look Like:
Develop, test, tune, and maintain SIEM detection rules, correlation logic, dashboards, and alert thresholds.
Integrate security tools and services using APIs, webhooks, scripts, and automation platforms.
Analyze logs and telemetry to identify suspicious or malicious activity, assess impact, and determine the appropriate response.
Monitor, triage, and investigate security alerts from SIEM, EDR, cloud, identity, email, and network-security platforms.
Build and enhance SOAR playbooks to automate alert enrichment, investigation, case management, notifications, and approved containment actions.
Validate SIEM data coverage, log quality, parsing, ingestion health, and retention across security-relevant systems.
Collaborate with IT, cloud, infrastructure, identity, network, and engineering teams to contain incidents and drive remediation.
Create and maintain incident-response runbooks, investigation guides, detection documentation, and automation procedures.
Translate investigation findings and post-incident lessons learned into improved detections, automation workflows, and security controls.
All You Need Is:
1-2 years of hands-on experience in Security Operations, SOC, Cyber Analysis, Incident Response, or Detection Engineering - Must.
Practical experience operating and maintaining SIEM platforms, including log onboarding, parsing, developing and tuning detection rules and alerting use cases - Must
Excellent written and verbal communication skills for documentation and reporting in English.
Experience analyzing security telemetry from different systems such as EDR, Windows and Linux systems, identity services, cloud environments, email-security tools, firewalls, DNS, proxy, VPN, and network devices.
Strong understanding of common attack techniques, the cyber kill chain, and the MITRE ATT&CK framework.
Proficiency in SIEM query languages such as KQL or SQL - Advantage
Experience with scripting or automation using Python, PowerShell, Bash, REST APIs, JSON, or webhooks - Advantage.
Familiarity with SOAR platforms and automation workflows for alert enrichment, investigation, case management, and response - Advantage.
Additional information
Mobileye changes the way we drive, from preventing accidents to semi and fully autonomous vehicles. If you are an excellent, bright, hands-on person with a passion to make a difference come to lead the revolution!
Tips for this job
Practical Job and Scholarship guidance. These tips do not replace official rules or create new eligibility requirements.
- Tailor the CV and application to the responsibilities and required skills stated on the official employer page.
- Use concrete evidence of relevant work, projects and measurable results rather than generic claims.
- Confirm location, work authorization, remote restrictions and sponsorship terms before applying.
- Apply through the original employer or official recruitment destination shown on this page.
Verification notes
Discovered directly from the employer’s public Lever Postings API. Full public description, role lists and additional information were normalized into safe candidate-facing content.
Job and Scholarship is the discovery and verification layer. Confirm eligibility, dates, salary/funding and application instructions on the original source before submitting anything.
Mobileye Careers ↗Browse current Job and Scholarship listings from Mobileye Careers →
