Description

Build and own the detection engineering process for a SIEM platform covering on-prem and multi-cloud environments. You will design, develop, tune, and maintain detection content to protect AWS and Azure infrastructure.

Responsibilities

• Implement technical solutions to enhance visibility, alerting, and risk reduction within AWS and Azure.
• Review applications, infrastructure, and architectural designs to identify threats and vulnerabilities.
• Partner with incident response, threat intelligence, Red/Purple teams, and HUNT researchers.
• Independently assess risks and suggest improvements to internal security controls and policies.

Required Skills

• 8+ years of relevant Cyber Security experience.
• 5+ years in Cloud SOC and/or Purple Team roles.
• Deep knowledge of security controls and operations for AWS and Azure.
• Hands-on experience with SIEM tools and writing/tuning detections.
• Experience with AWS native services including GuardDuty and Security Hub.
• Understanding of threat frameworks such as MITRE ATT&CK for Cloud and D3FEND.
• Familiarity with security frameworks including CIS, NIST, HIPAA, GDPR, PCI DSS, and ISO 27001.
• Experience securing cloud infrastructure using native services or third-party vendor tools.
• Bachelor's degree in Computer Science, Information Systems, Cyber Security, or a related field.

Preferred Skills

• CCSP, CCSK, CISSP, CISM, or Security+ certifications.

Key Skills

Education

Bachelor's degree