Security Content Engineer

• 5-8 years of direct experience in Detection Engineering, Security Operations, or a similar role with a heavy focus on content creation.
• Deep, hands-on expertise with the Microsoft security stack, including Microsoft Sentinel, Microsoft 365 Defender, and Logic Apps.
• High proficiency in Kusto Query Language (KQL), with proven experience writing complex, optimized queries for detection and hunting.
• Strong, demonstrated experience automating security workflows using SOAR platforms, APIs, or scripting languages (Python, PowerShell).
• Proven ability to operate with a high degree of autonomy, managing competing priorities and complex projects with minimal supervision.
• In-depth knowledge of attacker TTPs, the MITRE ATT&CK framework, and modern blue team operations.
• Excellent analytical and problem-solving skills, with experience in deep log analysis and digital forensics.
• Strong collaboration and communication skills, with the ability to clearly explain complex technical concepts.
• Experience in a large-scale Managed Detection and Response (MDR) environment.
• Familiarity with CI/CD pipelines and version control (Git) for managing "detections-as-code."
• Advanced industry certifications such as GCIH, GDAT, GCFA, or OSCP.
• Join a global, mission-driven cybersecurity company defending organizations worldwide with cutting-edge data, technology, and expertise.
• Competitive compensation, comprehensive benefits, flexible work arrangements, and opportunities for professional growth and development.
• Play a key role in developing and optimizing detection content that directly strengthens the security posture of global clients.
• Gain hands-on experience with Microsoft Sentinel, KQL, threat-informed detection engineering, and security automation in a collaborative, high-impact environment.

About BlueVoyant BlueVoyant is an AI-driven cybersecurity company dedicated to standing between our customers and cyber threats. By combining human, artificial, and proprietary intelligence, we deliver a unified solution that protects every organization’s network, identities, vendors, and digital footprints as a single attack surface. The company’s award-winning Microsoft Security expertise helps organizations maximize their security investments while reducing risk and ensuring compliance. Led by CEO, John Hernandez, BlueVoyant’s highly skilled team includes former government cyber officials with extensive frontline experience in responding to advanced cyber threats on behalf of the National Security Agency, Federal Bureau of Investigation, Unit 8200, and GCHQ, together with private sector experts. BlueVoyant services utilize large real-time datasets with industry leading analytics and technologies. Founded in 2017 by Fortune 500 executives, including Chairman of the Board, Jim Rosenthal, Vice Chairman, Tom Glocer, and former Government cyber officials, BlueVoyant is headquartered in New York City and has offices in Maryland, Tel Aviv, London, Budapest, and Latin America and is committed to building a workplace where talented people are empowered to do their best work in the fight against global cyber threats. All employees must be authorized to work in the United Kingdom. BlueVoyant provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, or genetics. In addition to federal law requirements, BlueVoyant complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. #LI-AH1 #LI-Remote