Lead Detection and Response Security Engineer

What you'll do

• Serve as the incident response coordinator to oversee activities and ensure timely resolution of incidents across business verticals.
• Develop, mature, and lead incident response functions and reporting of findings.
• Lead technical security assessments for network, application, and database infrastructure for existing and newly acquired services.
• Facilitate quarterly incident response tabletop exercises and update the Incident Response Plan.
• Create platform automations using scripting languages to increase efficiency in responding to observed threats.
• Analyze network, server, and application logs with forensic depth to identify trends and security incidents.
• Use security tools to audit infrastructure, detect issues, and coordinate remediation of identified vulnerabilities.
• Develop and mature threat hunting practices across the enterprise.

What we're looking for

• Bachelor's Degree from an accredited, not-for-profit university or college.
• One or more security certifications such as SANS/GIAC, CISSP, CISM, GCIH, CEIH, or equivalent.
• 8+ years of experience in Information Technology.
• 5+ years of cyber security experience.
• Proficiency in scripting and programming languages including Perl, Python, or PowerShell.
• Experience with Windows Server 2012/2016/2019 and Active Directory.
• Experience with Microsoft Security tooling such as Defender, Sentinel, and EOP (preferred).
• Ability to produce detailed technical documentation (preferred).