Senior Security Engineer, Detection and Response

Required

• 5+ years of hands-on experience in security operations with emphasis on Incident Response and Detection Engineering. Additional expertise in threat hunting, cyber threat intelligence, and digital forensics is preferred.
• Industry certifications in Incident Response or related fields are strongly preferred, such as GCIH, GCFA, GIME, OSIR, or GEIR.
• Intellectual curiosity with a passion for understanding emerging threats, analyzing attack patterns, and continuously learning about evolving security landscapes and adversary tactics.
• Strong investigative instincts that compel you to dig deeper into anomalies, follow evidence trails, and reconstruct complex security incidents from fragmented data.
• Commitment to proactive learning and staying ahead of evolving threats by researching emerging attack techniques and sharing insights with the security team.
• Solid technical foundation in security concepts and technologies, with hands-on experience using enterprise security tools including EDR, NDR, CSPM, EASM, SIEM, SOAR, and Cloud Security platforms such as GuardDuty.
• Proficiency with threat intelligence frameworks such as MITRE ATT&CK and their application in assessing detection capabilities and coverage gaps.
• Expertise in developing new threat detection use cases based on security telemetry analysis, environment baselining, actionable threat intelligence, and incident response findings.
• Ability to identify detection coverage gaps across global infrastructure and collaborate with stakeholders to enhance visibility through improved logging and detection content.
• Strong understanding of AWS cloud services and containerization technologies.