Description

Secure application environments and automate incident response workflows through technical integration and tooling optimization.

This role is on-site.

Responsibilities

• Tune alerts from cybersecurity tooling to reduce noise and improve detection accuracy.
• Develop playbooks and process automation utilizing SOAR technologies.
• Collaborate with CIR and application teams to ensure security logs are monitored, accounted for, and complete.
• Assist external teams with the configuration of security infrastructure including IDS/IPS, firewalls, and phishing technologies.
• Enforce process governance and regulatory compliance in coordination with Incident Response groups.

Required Skills

• 3 years of Information Technology Security experience.
• 3 years of scripting and automation experience using PowerShell, Python, or JavaScript.
• Experience with SIEM, EDR, and SOAR platforms.
• Knowledge of Linux/Unix, BASH, and Windows Administration.
• Understanding of networking concepts, services, and protocols.
• Knowledge of security controls, architecture, vulnerability identification, and threat intelligence.
• Experience working within Agile methodologies.
• Ability to travel and work a flexible schedule to support incident response triage.

Preferred Skills

• 5+ years of Information Technology Security experience.
• Experience building and using APIs.
• Active Directory experience and Security+ or CISSP certification.

Bachelor's degree in Computer Science, Information Systems, Engineering, Technology, or equivalent experience.

Key Skills

Education

Bachelor's degree in Computer Science, Information Systems, Engineering, Technology