Description

You will lead incident response and threat hunting across corporate, cloud, and product environments.

Responsibilities

• Lead incident response for cloud and product environments, executing investigation, containment, eradication, and recovery.
• Perform proactive threat hunting across endpoints, networks, and cloud workloads to identify indicators of compromise.
• Conduct cloud incident response and workload forensics, analyzing logs and identity compromises in AWS, Azure, and GCP.
• Drive product security investigations by collaborating with engineering teams to assess vulnerabilities and exploit paths.
• Develop security orchestration playbooks and refine detection strategies using MITRE ATT&CK frameworks.

Required Skills

• 8+ years of hands-on experience in incident response and threat hunting.
• Proficiency in forensic analysis, intrusion detection, and threat intelligence.
• Advanced knowledge of network analysis, OS internals (Windows/Linux/macOS), and web application security.
• Strong knowledge of cloud security principles, identity and access management, and workload protection.
• Experience with product security investigations, vulnerability analysis, and secure coding practices.
• Hands-on experience with AWS, Azure, GCP, Docker, and Kubernetes.
• Development experience in Python or Go for security automation.

Preferred Skills

• Certifications such as GCIH, GCFA, AWS/Azure Security Specialty, or CISSP.
• Hands-on experience with AI security.

Key Skills

Education

Bachelor's degree