Senior Security Engineer (SIEM/XDR)-SOC

• Previous experience conducting analysis and investigation of cybersecurity incidents
• Experience using SIEM or XDR for log analysis and alert creation
• Extensive experience utilizing security tools such as EDR (including live response), web proxy, WAF and email security tools
• Experience with cloud environments (AWS, Azure, GCP)
• Digital Forensics and Incident Response (DFIR) skills
• Ability to query using various query languages such as SPL, SQL, KQL.
• Threat hunting experience preferred
• Ability to communicate effectively and possess excellent prioritization skills .
• Ability to automate tasks and code solutions to repetitive problems (Python, PowerShell, Bash)
• Previous red/purple team experience (practical or lab based) is a plus

What you will do:

• Investigate security events and incidents and work from triage to remediation
• Work closely with key stakeholders and cross functional teams to identify, respond to, and remediate information security issues
• Assist with building and implementing tools to automate security monitoring and tasks
• Threat Hunting- Hunt for bad, misconfigurations, and other anomalous activity
• Drive automation initiatives, enhancing analyst capabilities and workflows while eliminating monotonous tasks
• Develop innovative and cutting-edge detection content aligned with ATT&CK, Cyber Kill Chain, and various other cyber security frameworks
• Bring your own ideas and solutions to a fast-paced, growing, and evolving team centered around operational excellence
• Provide rotational on-call support for weekend emergencies (rarely), ensuring uninterrupted security coverage and prompt incident response
• Effectively collaborate with team members spread across multiple geographies, ensuring seamless communication and coordination for successful outcomes

• 3-5 years of relevant Information Security or SOC experience.
• bachelors in computer science, Information Security, Engineering, or commensurate experience in Information security is preferred
• Passion for security and solving tomorrow s problems
• Willingness to learn new technology platforms
• Strong team player
• Certifications like GCIH, GCFA or equivalent are a plus
• Able to work proactively in a time sensitive operations environment
• Innovation mindset - Takes opportunities to make existing processes more efficient and thinks automation first