Description

Lead security incident response and operations within complex cloud and hybrid environments.

This role is on-site.

Responsibilities

• Lead incident response efforts during challenging security scenarios.
• Develop detection logic, queries, and dashboards using Splunk.
• Automate security tool integrations using Python and shell scripting.
• Perform network and endpoint forensics to investigate security events.
• Produce detailed incident reports, documentation, and RCCA artifacts.

Required Skills

• 10+ years of hands-on experience in SOC or Security Incident Response teams.
• Advanced Splunk skills including detection creation and dashboard development.
• Proficiency with AWS, GCP, and Azure security standards and methodologies.
• Deep understanding of PKI, authentication, authorization, and data encryption.
• Strong knowledge of networking protocols including TCP/UDP.
• Proficiency with logging technologies including Splunk and Kibana.
• Programming experience in Python and shell scripting.

Preferred Skills

• Knowledge of Cloud security controls including IAM, Cloud Trail, EC2, S3, and Kubernetes.
• Familiarity with DevOps tools such as Ansible, Docker, Terraform, and Kubernetes.
• Security certifications such as CISSP, SSCP, CSSP, GISP, or Security+.

Key Skills

Education

Bachelor’s Degree