Description

Manage risk mitigation and remediation of internal and external security threats through advanced analysis and incident response.

This role is on-site.

Responsibilities

• Respond to and remediate email, endpoint, threat intelligence, and network-based threats.
• Perform security event correlation, triage, and analysis to identify compromised applications, networks, systems, or users.
• Operate security tools including SIEM, SOAR, threat intelligence platforms, EDR, cloud security products, IDS/IPS, and Zero Trust tooling.
• Implement threat analysis using industry standard frameworks such as the kill chain and diamond model.
• Maintain operational playbooks, process diagrams, and documentation while producing tactical threat intelligence reports.

Required Skills

• Experience with incident response and advanced threat analysis.
• Proficiency operating SIEM, SOAR, EDR, and IDS/IPS technologies.
• Knowledge of defense-in-depth security best practices and architecture concepts.
• Ability to perform forensic investigations and security event correlation.
• Familiarity with cloud security, email protection, and Zero Trust tooling.
• Strong understanding of threat intelligence gathering and reporting.
• Bachelor's Degree in a related field.
• One of the following certifications: GSEC, GCIA, GFE, GCFA, CISA, CISSP, CISM, or CIA.

Preferred Skills

• Collaborate on projects to implement technologies for identifying malicious behavior within cloud, network, and endpoint environments.

Key Skills

Education

Bachelor's Degree