Description

Lead security monitoring and incident response to defend against internal and external threats.

This role is remote.

Responsibilities

• Investigate and respond to security threats, including DLP and SIEM events across on-premise and cloud systems.
• Manage and improve security products such as EDR, AV, Cloud Security, IDS, and DLP.
• Develop automation response scripts to remediate commodity threats.
• Perform threat hunting and analysis using the Kill Chain and Diamond Model frameworks.
• Collaborate with MSSPs, forensic providers, and IT teams to remediate incidents and identify root causes.

Required Skills

• 5+ years of experience in security monitoring and incident response.
• Proficiency in managing DLP, SIEM, EDR, AV, and IDS technologies.
• Experience implementing security monitoring on SaaS, cloud systems, networks, servers, and endpoints.
• Ability to develop automation scripts using Python or PowerShell.
• Hands-on experience with threat hunting and intelligence gathering.
• Knowledge of threat analysis utilizing industry-standard frameworks.
• Strong documentation skills for playbooks and process diagrams.

Preferred Skills

• Experience with cloud security technologies.

Key Skills

Education

Any Graduate