Description

You will own detection engineering and incident response to protect organizational information systems and data.

This role is remote.

Responsibilities

• Design, build, and fine-tune detection systems to identify malicious activities and suspicious patterns.
• Implement automation for vulnerability management, threat detection, and incident response workflows.
• Identify, contain, and respond to security incidents while executing corrective actions for audit findings.
• Monitor and audit systems for security violations and maintain control integrity.
• Develop and maintain security policies aligned with control frameworks.

Required Skills

• 10+ years of experience in security operations or related roles.
• Technical proficiency with Linux distributions and Microsoft Windows operating systems.
• Hands-on experience with Microsoft Active Directory and TCP/IP networks.
• Strong understanding of DNS, network design, and common network protocols.
• Experience with network monitoring, next-generation firewalls, and intrusion detection/prevention systems.
• Ability to analyze large data sets to identify patterns, anomalies, and malware.
• Technical proficiency with PowerShell, Python, and Bash scripting.
• Proficiency with ServiceNow and Jira for workflow management.
• Experience with Microsoft Defender.

Preferred Skills

• Experience with PCI-DSS, ISO-27001, or SOC II compliance frameworks.
• Experience implementing security controls aligned with NIST 800-53 and CIS.
• Knowledge of SentinelOne, Tanium, Google Chronicle, Cloudflare, Tenable.io, Recorded Future, or Azure Key Vault.

Key Skills

Education

Any Graduate