Job Description

Responsibilities

• Partner with Cyber Threat Intelligence and Detection Engineering teams to identify threats and maintain accurate, high-signal detections.
• Triage escalated alerts and determine whether security incidents are occurring or imminent.
• Respond to security incidents as an incident commander or incident responder.
• Build tools and automations to eliminate repetitive incident response processes.
• Conduct post-incident reviews, tabletop exercises, and purple team exercises.
• Improve security processes, runbooks, and the organization’s overall defensive posture.
• Participate in a light on-call rotation.

Requirements

• At least 5 years of experience in security incident response, threat hunting, security operations, cloud security, or another operational security domain.
• Experience with at least one public cloud platform: AWS, GCP, or Azure.
• Experience with cloud-native technologies such as Kubernetes, Docker, or Terraform.
• Strong understanding of cloud-native threat actor tactics, techniques, and procedures and corresponding defensive controls.
• Experience using diverse technologies and datasets to detect threats in cloud and enterprise environments.
• Experience building and supporting incident response and forensic tools using Python, Go, or similar programming languages.
• Ability to stay current with the threat landscape through blogs, whitepapers, and conference talks.

Benefits

• Hybrid workplace with an emphasis on office collaboration and culture.
• Competitive salary and equity package, including new-hire RSUs and an employee stock purchase plan.
• Healthcare, dental, parental planning, mental health benefits, a 401(k) plan and match, paid time off, fitness reimbursements, and a discounted employee stock purchase plan.
• Continuous career development, career pathing, best-in-class onboarding, and internal mentoring and buddy programs.
• Friendly and inclusive workplace culture.

Job Tags

Similar Jobs