To support the ongoing transformation of the Security Operations & Incident Response program, the contracted Engineer - Security Operations and Incident Response will drive operational delivery excellence and continuous advancement in cybersecurity threat identification and eradication while working remotely.
Key responsibilities
Provide expert-level support for deep dive investigations, including digital forensics and malware analysis Author and refine incident response playbooks and operational guidelines to adapt to evolving threats Design and implement complex detection rules and automated remediation workflows to identify adversarial behavior Required qualifications Bachelor's degree and 5+ years of relevant experience in incident response and SOC tooling In-depth knowledge of SIEM/SOAR platforms and incident response processes in hybrid cloud environments Experience leading incident response as incident commander and performing root cause analysis Familiarity with scripting languages such as Python, PowerShell, and Bash Understanding of regulatory compliance frameworks such as MITRE ATT&CK and NIST
Experience: 3 years required