Threat Detection Security Engineer

What you'll do

• Manage cyber security incidents from initial identification through final resolution.
• Record all incident artifacts and evidence accurately in the tracking system.
• Serve as a point of escalation for alert triage and provide expert investigation guidance.
• Maintain and improve the Incident Response Plan and associated procedures.
• Utilize MITRE ATT&CK frameworks to drive the overall strategy of the incident response team.
• Execute proactive threat hunts across the enterprise environment.
• Design and deliver quarterly tabletop exercises and security training.
• Identify opportunities for automation to increase detection and response efficacy.

What we're looking for

• Bachelor's Degree from an accredited, not-for-profit, in-person university or college.
• 4+ years of hands-on security engineering experience.
• Experience with Microsoft/Azure security tooling including Defender and Sentinel.
• Proficiency in scripting with a language such as Python or a low-code automation solution.
• Ability to identify opportunities for automation to increase detection and response efficacy.
• Expertise in Mitre ATT&CK, tools, techniques, and practices of cyber attackers.
• Experience performing incident response in cloud environments and Kubernetes environments.
• Excellent documentation and communication skills to convey risk to leadership.