Description

Build and own the detection engineering process for a SIEM platform covering on-prem and multi-cloud environments. This role is on-site.

Responsibilities

• Design, develop, tune, and maintain detection content to protect AWS and Azure infrastructure.
• Implement technical solutions to enhance visibility, alerting, and risk reduction within cloud environments.
• Review applications, infrastructure, and architectural designs to identify threats and vulnerabilities.
• Partner with incident response, threat intelligence, and Red/Purple teams to improve security posture.
• Independently assess risks and suggest improvements to internal security controls and policies.

Required Skills

• 8+ years of relevant Cyber Security experience.
• 5+ years in Cloud SOC and/or Purple Team roles.
• Deep knowledge of security controls and operations for AWS and Azure.
• Hands-on experience with SIEM tools and writing/tuning detections.
• Experience with AWS native services including GuardDuty and Security Hub.
• Understanding of threat frameworks such as MITRE ATT&CK for Cloud and D3FEND.
• Familiarity with security frameworks including CIS, NIST, HIPAA, GDPR, PCI DSS, and ISO 27001.
• Bachelor's degree in Computer Science, Information Systems, Cyber Security, or a related field.

Preferred Skills

• CCSP, CCSK, CISSP, CISM, or Security+ certifications.

Key Skills

Education

Bachelor's degree