Cyber Threat Defense Senior Engineer

Job Area: Information Technology Group, Information Technology Group > Cyber Security Engineering

General Summary:

Addresses the requirement for engineering practitioners in cybersecurity functions. Protects vital electronic systems and data from attack, as well as outsmarting and responding appropriately to sophisticated cyber-attacks. Maintains and applies working knowledge of industry standard cybersecurity frameworks and standards to analyze and prioritize cybersecurity risks across the enterprise and recommend treatment options. Researches attempted or successful efforts to compromise application, system, network or data security and designs countermeasures. Identifies, designs, implements, executes and assesses technical and procedural capabilities to effectively identify, prevent, detect, and respond to evolving cyber threats which threaten company electronic information, devices, applications, and data.

Minimum Qualifications:
"¢ Bachelor's degree in Engineering, Information Systems, Computer Science, or related field and 2+ years of cybersecurity-relevant work experience.

OR
High school diploma or equivalent and 4+ years of cybersecurity-relevant work experience.

Physical Requirements:
"¢ Frequently transports and installs equipment up to 40 lbs.

Job Summary: We are seeking a highly skilled and experienced Cyber Security Incident Response, Detection & Threat hunting professional to join our team. The primary focus of this role will be on CSIRT, Detection Management & Threat Hunting along with providing in-depth investigation and support for incidents escalated from CyberSOC Tier 1 and Tier 2.

Key Responsibilities:

Conduct threat hunting and manage CSIRT incidents.

Provide in-depth investigation and support for incidents escalated from SOC Tier 1 and Tier 2.

Own and drive the Cyber Security Incident process.

Utilize strong knowledge and hands-on experience in detection management frameworks to onboard detections in multiple SIEM or EDR solutions.

Perform detailed analysis of various security-related events, including social engineering attacks, malware outbreaks, DDoS, ransomware, and more.

Communicate with key business units to make recommendations on mitigation and prevention techniques.

Recommend and document acceptable mitigating controls.

Liaise with Incident Managers to engage other ISRM stakeholders and the rest of the business.

Contribute to the improvement of SOC operations through the identification, development, and maintenance of new use cases.

Monitor security blogs, articles, and reports to stay current on the latest security risks, threats, and technology trends.

Develop custom content for the SIEM platform.

Create, publish, and communicate dashboards to be monitored by the Security Operations Center.

Be available on call 24x7, including weekends and off-hours.

Qualifications:

Strong knowledge and hands-on experience in detection management frameworks and onboarding detections in SIEM or EDR solutions.

Expertise in malware analysis and the ability to conduct detailed analysis of various security-related events.

Excellent communication skills for interacting with key business units and making recommendations on mitigation and prevention techniques.

Experience in liaising with Incident Managers and engaging other ISRM stakeholders.

Proficiency in developing custom content for SIEM platforms and creating dashboards for the Security Operations Center.

Availability for on-call responsibilities 24x7, including weekends and off-hours.

Preferred Skills:

Detection development on multiple EDR and SIEM solutions.

Hands-on on Threat Hunting & handling CSIRT.

Familiarity with the latest security risks, threats, and technology trends.

Strong analytical and problem-solving skills.

Ability to work effectively in a fast-paced and dynamic environment.