Description

You will own security engineering functions focused on detection and response tooling, including EDR and SIEM integrations.

This role is remote.

Responsibilities

• Support implementation and integration of the ADR solution to meet security requirements.
• Collaborate with teams to gather requirements and design EDR and SIEM integrations.
• Monitor and analyze security events from EDR and SIEM tools, recommending remediation.
• Develop and maintain security policies, procedures, and documentation for EDR and SIEM.
• Conduct security assessments and vulnerability analyses, providing mitigation strategies.

Required Skills

• 3-5 years of experience in security engineering focusing on EDR and SIEM.
• Proven experience supporting EDR solutions and integrating logs into SIEM systems.
• Strong understanding of security frameworks (e.g., NIST, ISO 27001, CIS Controls).
• Experience with Python, PowerShell, or Bash for automation and tool integration.
• Familiarity with incident response processes, threat hunting, and vulnerability management.
• Knowledge of regulatory compliance requirements such as GDPR, HIPAA, or PCI-DSS.
• Experience with security engineering principles.
• Analytical problem-solving skills with attention to detail.

Preferred Skills

• Experience with AWS, Azure, or GCP cloud security architectures.

Key Skills

Education

Bachelor's degree