This is a fully remote position, open to applicants in California, +4 more states.

📋 Description

• Evaluate EDR telemetry, alerts, and log sources spanning Endpoint, Identity, Network, and Cloud/SaaS detection areas.

• Communicate threats to customers by delivering clear summaries that highlight key indicators and remediation information.

• Enhance the Detection Operations workflow via orchestration and automation to effectively handle large volumes of telemetry.

• Report directly to the Detection Analyst Manager within the Detection Operations Team.

⛳️ Requirements

• A demonstrated interest and proactive exploration of AI tools, with a solid background in integrating new technologies to improve daily operations and enhance problem-solving capabilities.

• Extensive experience in Endpoint (EDR) and at least one additional functional area such as Cloud/SaaS, Identity, Email, or Network detection domains.

• Proficiency in utilizing query languages and comprehending syntax across EDR or alternative security platforms, including SQL or Lucene.

• Hands-on experience implementing AI-driven tools or automated workflows to expedite threat detection and bolster security engineering (preferred).

• Prior professional experience in a Red Team or offensive security role (preferred).

• Active participation in the Infosec community through blogging, engaging in webinars, or speaking at conferences (preferred).