This is a fully remote position, open to applicants in India.

📋 Description

• Manage second-line triage and response for security alerts

• Oversee incident management until resolution and promote post-incident enhancements

• Develop and sustain runbooks for consistent response procedures

• Establish and execute automation to reduce manual tasks

• Collaborate with Security Operations to formulate monitoring strategies based on attacker investigations

• Lead security monitoring and incident response for new Web3 product launches

• Provide mentorship to colleagues and disseminate knowledge

• Engage in 24/7 rotational coverage across different time zones

⛳️ Requirements

• Over 3 years of practical experience in security operations, encompassing incident response, alert triage, and network/host forensics across cloud, SaaS, and container environments

• Capability to identify detection deficiencies and establish comprehensive coverage across various log sources, including cloud platforms, SaaS applications, container orchestration, and M&A integrations

• Skilled in scripting automation workflows using Python, Bash, or similar languages

• Fundamental understanding of networking principles and proficiency in Windows, Linux, and macOS operating systems

• Experience with large-scale SIEM platforms and threat intelligence tools, including alert tuning and enhancing signal-to-noise ratios

• Ethical use of generative AI with human oversight to produce business-ready outcomes and measurable workflow enhancements