Senior Cyber Security Engineer – Threat Hunting & SOC Operations

Senior Cyber Security Engineer – Threat Hunting & SOC Operations

Location: Chicago, IL / Pittsburgh, PA (Onsite)

Experience: 12+ Years

 

Role Overview

We are seeking a highly skilled Cyber Security Engineer with strong expertise in Threat Hunting, SOC Operations, Incident Response, Threat Intelligence, and Cloud Security. The ideal candidate will proactively identify advanced threats, investigate security incidents, perform threat hunting activities, and strengthen enterprise security posture across cloud and on-premises environments.

 

Key Responsibilities

Threat Hunting & Detection

Perform proactive threat hunting across enterprise environments using SIEM, EDR/XDR, and threat intelligence platforms.

Investigate Indicators of Compromise (IOC) and Indicators of Attack (IOA).

Utilize MITRE ATT&CK framework to identify adversary tactics, techniques, and procedures (TTPs).

Conduct malware analysis, threat intelligence correlation, and advanced threat investigations.

Implement detection use cases and correlation rules to identify suspicious activities.

SOC Operations & Incident Response

Monitor and analyze security events using Splunk, QRadar, Sentinel, and other SIEM platforms.

Investigate security alerts and lead incident response activities.

Perform root cause analysis and remediation planning for security incidents.

Support 24x7 SOC operations and security monitoring programs.

Develop incident response playbooks and response procedures.

Cloud & Enterprise Security

Secure AWS and Azure environments through implementation of security controls and monitoring.

Configure IAM, MFA, RBAC, Conditional Access, and cloud-native security services.

Assess security posture of cloud and on-prem applications.

Implement security controls across enterprise infrastructure and applications.

Endpoint Security & Threat Protection

Manage CrowdStrike Falcon, Microsoft Defender, SentinelOne, or other EDR/XDR platforms.

Investigate endpoint threats, ransomware attacks, phishing incidents, and insider threats.

Develop endpoint detection and response strategies.

Security Architecture & Governance

Support secure architecture reviews for cloud and enterprise applications.

Participate in vulnerability assessments and remediation programs.

Assist with security audits, compliance initiatives, and governance activities.

Implement deception technologies, honeypots, and threat emulation strategies.

Required Skills

Security Operations

SOC Operations

Incident Response

Threat Hunting

Threat Intelligence

Threat Detection Engineering

SIEM Platforms

Splunk

QRadar

Microsoft Sentinel

Endpoint Security

CrowdStrike Falcon

Microsoft Defender

EDR/XDR Platforms

Cloud Security

AWS Security

Azure Security

IAM

MFA

RBAC

Security Frameworks

MITRE ATT&CK

NIST

ISO 27001

CIS Controls

Additional Skills

Malware Analysis

Phishing Investigation

IOC/IOA Analysis

Threat Intelligence Platforms

Honeypots & Deception Technologies

Preferred Certifications

CISSP

CEH

Security+

GIAC (GCIH, GCFA, GCIA)

AWS Security Specialty

Azure Security Engineer Associate