Description

You will lead security incident response and operations within complex cloud and hybrid environments.

Responsibilities

• Lead incident response efforts during challenging security scenarios.
• Develop detection logic, queries, and dashboards using Splunk.
• Automate security tool integrations using Python and shell scripting.
• Produce detailed incident reports, documentation, and RCCA artifacts.
• Perform network and endpoint forensics to investigate security events.

Required Skills

• 10+ years of hands-on experience in SOC or Security Incident Response teams.
• Proficiency with AWS, GCP, and Azure security standards and methodologies.
• Experience securing IaaS, PaaS, and network-as-a-service environments.
• Advanced Splunk skills including detection creation and dashboard development.
• Deep understanding of PKI, authentication, authorization, and data encryption.
• Strong knowledge of networking protocols including TCP/UDP.
• Experience with security products such as Tenable Nessus and Nexpose.
• Proficiency with logging technologies including Splunk and Kibana.
• Programming experience in Python and shell scripting.
• Bachelor’s degree in Computer Science, Information Security, or equivalent experience.

Preferred Skills

• Knowledge of Cloud security controls including IAM, Cloud Trail, EC2, S3, and Kubernetes.
• Familiarity with DevOps tools such as Ansible, Docker, Terraform, and Kubernetes.
• Security certifications such as CISSP, SSCP, CSSP, GISP, or Security+.
• Understanding of compliance standards including ISO27001, SOC2, NIST, HIPAA, and PCI-DSS.

Key Skills

Education

Bachelor’s Degree