Security Engineer

Responsibilities

• Support cyber defense, threat detection, and incident response activities.
• Investigate security incidents and perform host and network forensics.
• Triage cybersecurity events and identify potential security breaches.
• Develop and improve threat detection rules and security controls.
• Create detection use cases based on MITRE ATT&CK TTPs.
• Work with SIEM and EDR tools to improve threat detection.
• Support 24x7 security operations and incident response.
• Lead assigned security projects and ensure timely completion.
• Work with security, forensic, and incident management teams.

Requirements

• Cybersecurity experience, including detection engineering and incident response.
• Strong knowledge of MITRE ATT&CK, NIST, threat intelligence, and security automation.
• Hands-on experience with Splunk, Elastic, and other SIEM platforms.
• Experience with EDR tools such as Microsoft Defender and CrowdStrike.
• Strong Python and PowerShell scripting skills.
• Experience with cloud security and incident response on AWS, Azure, or GCP.
• Strong analytical, problem-solving, and communication skills.