Description

Implement and maintain security detection rules across on-premise and Google Cloud environments, leading incident response and threat hunting efforts.

This role is remote.

Responsibilities

• Implement, configure, and maintain security detection rules for intrusion, anomaly detection, and log analysis.
• Lead incident response efforts, conduct root cause analysis, and execute Kubernetes-specific forensic investigations.
• Perform proactive threat hunting, monitoring, and tuning within security operations.
• Develop automation scripts using Python and Bash to streamline detection and response workflows.

Required Skills

• 8+ years of experience in security operations and incident response.
• Proficiency in Python and Bash for security automation and CI/CD integration.
• Hands-on experience with Kubernetes incident response and forensic analysis.
• Experience with Splunk or similar SIEM solutions for log analysis.
• Practical application of the MITRE ATT&CK framework for threat detection and gap analysis.
• Experience with threat emulation tools such as Atomic Red Team, PurpleSharp, or Safebreach.

Preferred Skills

• Google Cloud Professional Cloud Security Engineer certification.
• Relevant certifications such as CISSP, GCIH, GCIA, CKA, or Splunk certifications.

Key Skills

Education

Any Gradute