Deploy, configure, maintain, and operate enterprise security platforms and technologies.
Configure, tune, and optimize security controls to improve detection, prevention, and monitoring capabilities.
Implement integrations and automation workflows across SIEM, SOAR, EDR/XDR, IAM, vulnerability management, and other security platforms.
Develop and maintain security monitoring, detection rules, alerts, dashboards, and use cases.
Support incident response investigations by analyzing security alerts, logs, endpoint telemetry, and other security data.
Implement and manage cloud security controls across AWS and Azure environments.
Perform security testing, control validation, configuration assessments, and technical security reviews.
Support vulnerability management activities including vulnerability identification, prioritization, remediation tracking, and validation.
Troubleshoot security platform issues, integrations, alerts, and operational security controls.
Develop PowerShell and/or Python automation scripts to streamline security operations and reduce manual effort.
Collaborate with SOC, incident response, infrastructure, cloud, DevOps, and application teams to implement and maintain security solutions.
Continuously improve security operations through automation, tuning, integration, and optimization of enterprise security technologies.
3–8 years of experience in cybersecurity, security operations, infrastructure security, or related engineering roles.
Hands-on experience implementing, configuring, and operating enterprise security technologies.
Strong experience with SIEM platforms such as CrowdStrike Next-Gen SIEM, Microsoft Sentinel, Splunk, or IBM QRadar.
Experience with SOAR platforms and security automation/orchestration workflows.
Hands-on experience with EDR/XDR solutions and endpoint security technologies.
Strong knowledge of AWS and Azure security services and cloud security controls.
Experience developing detection rules, correlation rules, alerts, dashboards, and security monitoring use cases.
Strong PowerShell and/or Python scripting skills for security automation and integrations.
Experience with Identity and Access Management (IAM) technologies and security controls.
Experience with vulnerability management tools, vulnerability assessment, remediation, and validation.
Strong understanding of security logging, monitoring, incident detection, investigation, and response processes.
Strong troubleshooting and root-cause analysis skills across security platforms and integrations.
Experience integrating SIEM, SOAR, EDR/XDR, IAM, cloud, and vulnerability management tools.
Ability to automate repetitive security operations and reduce manual processes.
Experience supporting security incident investigations and providing technical evidence for response activities.
Strong understanding of security operations, threat detection, monitoring, and security control validation.
Ability to work effectively with SOC, infrastructure, cloud, DevOps, and application engineering teams.
Strong documentation and communication skills.
Demonstrated ability to improve operational security through automation, platform tuning, and continuous optimization.
.png?format=webp)
Never miss an opportunity! Create an alert based on the job you applied for.
