Description

You will lead security engineering efforts across incident response, threat detection, and defense automation.

This role is on-site.

Responsibilities

• Lead triage, validation, and full-lifecycle remediation of complex P1/P2 security events.
• Perform memory forensics, packet analysis, and reverse engineering to identify malicious activity.
• Develop and deploy detection signatures and automation to hunt advanced threats.
• Mentor a team of four engineers while maintaining SOC playbooks and secure configuration standards.
• Build automation using Python, PowerShell, and C# to connect security applications and streamline incident handling.

Required Skills

• 5+ years in a SOC, Incident Response, or Threat Detection team.
• Advanced understanding of TCP/IP, network services, cryptography, and cloud-based attacks.
• Proficiency in Python, PowerShell, and C# for code analysis and automation development.
• Deep experience in host, cloud, and network-based forensics.
• Expertise maintaining defenses within the Microsoft Security stack (Defender, Azure Sentinel).
• Bachelor's degree required.
• Experience in incident leadership and executive stakeholder communication.

Key Skills

Education

Bachelor's degree