Join our Security Operations team to help protect organizational systems by monitoring for cyber threats, triaging alerts, and responding to incidents. You’ll partner with engineering and risk teams to harden systems and continuously improve our detection and reporting capabilities.

Job Purpose

The purpose of this role is to detect, analyze, and respond to cyber threats in near real time while maintaining security controls, strengthening incident readiness, and delivering accurate vulnerability and risk reporting through continuous monitoring, tuning, and automation.

Job Duties and Responsibilities

• SIEM/SOC tooling (Splunk/QRadar)
• Threat detection engineering and log analysis
• Incident response (triage, containment, eradication)
• Security monitoring and alert triage
• Continuous analysis and reporting
• System hardening and applying security recommendations
• Vulnerability management (scanning and prioritization)
• Risk reporting and metrics accuracy
• Detection tuning and automation
• MITRE ATT&CK mapping and use
• Network and endpoint security basics (Windows/Linux, AD)
• Analytical thinking and problem solving
• Clear incident communication

Required Qualifications

• Experience with SIEM/SOC tooling (Splunk/QRadar)
• Demonstrated incident response skills (triage, containment, eradication)
• Strong threat detection engineering and log analysis experience
• Hands-on vulnerability management experience (scanning and prioritization)
• Working knowledge of network and endpoint security (Windows/Linux, AD)
• Ability to map detections to MITRE ATT&CK techniques/tactics
• Attention to detail and analytical/problem-solving ability
• Ability to work under pressure and manage incident timelines
• Strong communication skills for incident updates and coordination