Senior Cyber Intelligence – Operation Engineer

This is a fully remote position, open to applicants in India.

📋 Description

• Conduct audits and refine customer digital footprints to ensure complete threat surface coverage.

• Set up and enhance alert rules, detection logic, and Digital Risk Protection configurations.

• Create tailored monitoring parameters that align with customer risk profiles and industry standards.

• Provide guidance to customers on security best practices and optimizing platform use.

• Maintain accurate and noise-free monitoring through effective configuration management.

• Produce technical onboarding documentation and configuration manuals.

• Aggregate, correlate, and contextualize security alerts from various sources.

• Offer ongoing managed threat monitoring and analysis services.

• Perform in-depth investigations into intricate threats, incidents, and adversary campaigns.

• Enhance digital footprints through thorough reconnaissance and discovery efforts.

• Deliver VIP analysis and focused threat assessments.

• Produce adaptive threat intelligence reports.

• Monitor platform adoption, user engagement, feature usage, satisfaction levels, and alarm quality metrics.

• Identify potential churn risks and enhance customer engagement through outreach, recommendations, and value demonstrations.

• Develop scripts in Python, PowerShell, Bash, and other languages to automate security workflows.

• Create tools for data parsing, transformation, enrichment, integrations, API wrappers, and connectors.

• Design AI-driven agents, machine learning models, chatbots, virtual analysts, and LLM-based security solutions.

• Architect workflows for security operations automation, including SOAR playbooks, reporting, notifications, escalations, self-healing, and adaptive response systems.

⛳️ Requirements

• Relevant experience and qualifications in threat intelligence enablement, customer technical solutions, automation, custom tooling, and proactive intelligence services are essential for this role.

• Capability to audit and refine customer digital footprints for thorough threat surface coverage.

• Proficiency in configuring and optimizing alert rules, detection logic, and Digital Risk Protection settings.

• Ability to design monitoring parameters tailored to specific customer risk profiles and industry requirements.

• Experience in providing ongoing threat monitoring and analysis.

• Competence in investigating complex threats, incidents, and adversary campaigns.

• Familiarity with reconnaissance and discovery techniques for enhancing digital footprints.

• Skill in analyzing platform adoption, user engagement, feature utilization, customer satisfaction, and alarm quality metrics.

• Programming and scripting expertise in Python, PowerShell, Bash, and other relevant languages.

• Ability to develop tools for data parsing, transformation, and enrichment for threat intelligence processing.

• Experience in integrating security platforms, SIEM systems, and third-party tools.

• Proficiency in designing API wrappers and connectors.

• Experience in designing and implementing AI-powered agents for automated threat analysis and triage.

• Knowledge of machine learning models for alert prioritization and anomaly detection.

• Ability to create LLM-based tools for natural language processing of security data and report generation.

• Experience in architecting processes for security operations automation.

• Familiarity with SOAR (Security Orchestration, Automation, and Response) playbooks and integrations.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health, dental, and vision insurance.

• Flexible work hours and remote work options.

• Opportunities for professional development and continuous learning.

• Collaborative and inclusive work environment.