
Senior Security Engineer, Threat Detection and Response
Posted 1 day ago

Posted 1 day ago
This is a fully remote position, open to applicants in United States.
• Conduct investigations into security incidents utilizing digital forensics and data analysis.
• Actively search for threats and irregular activities within corporate and production environments.
• Develop automation and detection models to pinpoint unusual activities and enhance response efficiency at scale.
• Collaborate with engineering teams to create and implement advanced detection solutions.
• Recognize visibility gaps in infrastructure and work together to address them through improved logging and detection.
• Lead intricate investigations alongside Legal, Privacy, Engineering, and other cross-functional teams.
• Utilize lessons learned from incidents and root cause analyses to drive enduring security enhancements.
• Mentor team members and assist in defining detection and response processes.
• Identify, investigate, and address both internal and external security threats.
• Shape and implement the team's detection and incident response strategy.
• A minimum of 5 years of practical experience in security operations, including investigations, incident response, incident management, digital forensics, threat intelligence, threat hunting, or detection engineering.
• Proficiency in Python or another scripting language.
• Experience in automating security detection and response processes.
• Familiarity with the Cyber Kill Chain and MITRE ATT&CK frameworks and their relevance to the current threat landscape.
• Capability to lead through influence in complex and ambiguous situations.
• Ability to maintain composure, collaboration, and decisiveness in high-pressure environments.
• Strong organizational, prioritization, and multitasking abilities.
• Self-driven, innovative problem-solver who excels when working independently.
• Preference for candidates with familiarity in Elasticsearch.
• Experience with AWS services such as EC2, S3, Lambda, and RDS is preferred.
• Must have the authorization to work in the U.S. without sponsorship.
• Full-time position, requiring 40 hours per week (Monday to Friday).
• Comprehensive benefits package.
OpenText
Koniag Government Services
Darktrace
Snowflake
Get handpicked remote jobs straight to your inbox weekly.