observed in the wild Detection Development Contribute to high-quality detection logic (YARA, behavioral rules, heuristics...) Demonstrated programming knowledge in C/C++ and Python Familiarity with YARA or other detection frameworks Experience...
in one or more detection languages such as Sigma, KQL, SPL, YARA-L, EQL, or Panther. Have an offensive security mindset and have led purple...
). Draft and iterate detection logic (e.g., Sigma/YARA, SIEM analytics rules, EDR custom IOAs) with measurable success criteria... or tuning detections using Sigma, YARA, EDR custom detections, or SIEM correlation rules. Familiarity with NIST CSF / NIST 800...
(Python, Bash, PowerShell, or similar). Understanding of Sigma, YARA, and other industry standard detection languages...
, PowerShell, or Bash for automation, data parsing, and custom tooling. Experience writing detection logic using SIGMA, YARA...