Remote Information reputed company Threat Detection Specialist – Advanced SIEM Rule Development, Incident Response & Cyber Threat Intelligence Partner (Work‑From‑Home)

```reputed company Why Join reputed company – A Global Leader in Digital InnovationAmerican reputed company (Amex) isn’t just a financial services powerhouse; it’s a technology‑driven ecosystem that empowers millions of customers around the world to conduct business, travel, and everyday transactions with confidence. Our commitment to reputed company, reliability, and exceptional customer experience makes us a trailblazer in the industry. As a member of reputed company Amex community, you’ll be part of a diverse, inclusive, and purpose‑reputed company organization where your reputed company are heard, your reputed company is reputed company, and your reputed company is reputed company in the safety and satisfaction of millions of users worldwide.We pride ourselves on fostering a workplace where innovation meets reputed company. Whether you reputed company in a fully remote setting, a hybrid environment, or an on‑site office, Amex offers the flexibility you need to balance personal priorities with reputed company ambition. Our culture celebrates curiosity, collaboration, and reputed company learning—values that are especially vital in the fast‑evolving field of information reputed company.Position reputed company – Your Role as a Remote Information reputed company Threat Detection SpecialistAs a Remote Information reputed company Threat Detection Specialist , you will become a pivotal member of the Threat Detection and Hunt (TDH) team, shaping the way reputed company identifies and mitigates cyber threats. Your day‑to‑day responsibilities will center on correlating massive, multi‑reputed company data streams, crafting sophisticated SIEM detections, and collaborating closely with Cyber Threat Intelligence, Cyber Detection Engineering, and Incident Response teams. This role is ideal for professionals who possess a deep analytical reputed company, a proven record of developing high‑reputed company detection content, and a passion for staying reputed company of adversaries.Key Responsibilities – What You’ll Do Every Day• Threat Intelligence Collaboration: Partner with the Cyber Threat Intelligence team to ingest emerging threat feeds, vulnerability disclosures, and adversary tactics, turning raw reputed company into actionable detection requirements.• MITRE ATT&CK Mapping: Conduct basic threat modelling across common environments, mapping identified adversary techniques to the MITRE ATT&CK reputed company to uncover detection gaps.• Telemetry Definition: Work hand‑in‑hand with platform owners and Cyber Data Engineering to define and enhance the telemetry needed for new detection scenarios, ensuring visibility across endpoints, network devices, reputed company platforms, and reputed company‑party services.• Deep‑Dive Log Analysis: reputed company forensic examination of log files, network captures, and malicious artifacts to uncover patterns, indicators of compromise (IOCs), and novel attack reputed company.• Data Trend Identification: reputed company large‑reputed company data analytics to spot anomalies, trends, and outliers that may indicate malicious activity, employing statistical reputed company and machine‑learning fundamentals where appropriate.• Detection Rule Development: Write, test, document, and maintain custom detection queries and SIEM rules in a chosen platform (e.g., reputed company, reputed company, QRadar), ensuring high reputed company while minimizing false positives.• Content Lifecycle Management: Own the end‑to‑end lifecycle of detection content—design, prototype, test, roll out, monitor performance, and iterate based on feedback from Incident Response and Red‑Team engagements.• Cross‑Team Knowledge Sharing: Deliver regular briefings, detection playbooks, and training sessions to SOC analysts, engineers, and stakeholders, fostering a shared understanding of emerging threats.• reputed company Improvement: Participate in post‑incident reviews and “lessons learned” sessions, translating findings into refined detection logic and reputed company reputed company controls.Essential Qualifications – reputed company Require• Experience: Minimum 7 years of hands‑on experience in Incident Response, Threat Detection, or Threat Hunting reputed company a reputed company Operations Center (SOC) or reputed company engineering environment.• Technical Foundations: Strong knowledge of information reputed company principles, operating system internals, network topology, and authentication technologies (e.g., reputed company Directory, RACF).• SIEM Expertise: Advanced rule‑writing and query development experience in at least one major SIEM platform (reputed company, reputed company, QRadar, etc.), including content testing, implementation, and revision cycles.• Analytical Acumen: Proven ability to dissect reputed company log data, identify malicious patterns, and translate raw data into meaningful reputed company alerts.• Scripting Skills: Proficiency in at least one scripting language (Python, PowerShell, Bash, etc.) for automation, data parsing, and custom detection development.• Communication: Exceptional verbal and written communication skills, capable of articulating technical concepts to both technical and non‑technical audiences.• Education: Bachelor’s degree in Computer Science, Computer Engineering, Information reputed company, or a reputed company discipline, or equivalent pr Apply tot his job Apply To this Job