Alert – Detection – And Response Engineer – VP – Cybersecurity

Alert – Detection – And Response Engineer – VP – Cybersecurity

Requirements

• 6+ years in a hands-on technical role in information security.
• Experience with cloud-native architectures such as AWS, Azure, Office 365, etc.
• Proven experience running investigations and managing incidents through security event detection platforms, SIEM platforms (e.g. Splunk) and EDR (e.g. CrowdStrike).
• Hands on experience creating custom detections within event detection and SIEM platforms.
• Working knowledge of a wide range of current network security technologies such as firewalls, proxies, network and host-based intrusion prevention, DLP, vulnerability assessment tools, security information/event management, endpoint security, anti-virus/anti-malware, etc.
• Digital forensics experience such as network analysis, malware analysis, memory analysis, etc.
• Development/scripting experience: Python and/or PowerShell.
• Ability to self-Highly organized, prioritize activities independently, create documentation and handle reporting.
• Ability to iInteractsface with business and technology stakeholder.
• Strong written and oral communication skills; with the ability to effectively explains technical ideas to non-technical individuals at any level.
• B.S. in Computer Science or Engineering or similar technical program.

Responsibilities

• Develop advanced threat detection mechanisms to identify and raise alerts for adversarial or high-risk behaviors within the company’s systems.
• Act as an experienced senior incident responder, leading complex investigations and managing incidents from detection through resolution using tools such as security incident and event management (SIEM) and endpoint detection and response (EDR).
• Continuously improve and fine-tune detection portfolio to adapt to new and emerging cyber threats.
• Represent the Blue Team on Red and Purple Team efforts to design and build detections.
• Provide exceptional Tier 1-3 escalation support including for analysis, investigations, and engineering.
• Supervise and monitor the quality of security operations investigations.
• Provide reporting and analysis on investigations and trends.
• Work with the security engineering team to identify trends in detections and investigations to better inform the engineering process (security by design).
• Coach and train junior team members on detection and investigation techniques.

Preferred Qualifications

No preferred qualifications provided.