Description

You will lead incident response and threat hunting across corporate, cloud, and product environments. Your work focuses on investigation, containment, and recovery for AWS, Azure, and GCP workloads, including Kubernetes and containerized systems.

Responsibilities

• Lead incident response efforts for cloud and product environments, executing investigation, containment, eradication, and recovery.
• Perform proactive threat hunting across endpoints, networks, and cloud workloads to identify indicators of compromise and control gaps.
• Conduct cloud incident response and workload forensics, analyzing logs and identity compromises in AWS, Azure, and GCP.
• Drive product security investigations by collaborating with engineering teams to assess vulnerabilities and exploit paths.
• Develop security orchestration playbooks and refine detection strategies using MITRE ATT&CK frameworks.

Required Skills

• 8+ years of hands-on experience in incident response and threat hunting.
• Strong knowledge of cloud security principles, identity and access management, and workload protection.
• Proficiency in forensic analysis, intrusion detection, and threat intelligence.
• Advanced knowledge of network analysis, OS internals (Windows/Linux/macOS), and web application security.
• Experience with product security investigations, vulnerability analysis, and secure coding practices.
• Ability to work independently and collaborate effectively across global teams.

Preferred Skills

• Certifications such as GCIH, GCFA, AWS/Azure Security Specialty, or CISSP.
• Development experience in Python, Go, or similar languages for security automation.
• Hands-on experience with container security (Docker, Kubernetes) and AI security.

Key Skills

Education

Bachelor's degree