Principal Response & Detection Engineer
1 Vanderbilt Ave New York, NY 10017 US
Job Description
Responsibilities
- Collaborate with cybersecurity team members to develop robust detection use cases that address current and emerging security threats.
- Create and implement detection logic leveraging multiple signal sources while mapping to industry-standard frameworks to ensure alignment to relevant TTPs.
- Assist in the triage and response to security events, utilizing SOAR, EDR, and SIEM tools in a cloud-forward environment to mitigate threats and minimize impact.
- Participate in an on-call rotation to ensure prompt response to after-hours security incidents and emergencies.
- Plan and execute threat hunting activities to proactively identify and mitigate potential threats before they impact the organization.
- Develop and implement SOAR automation workflows to streamline response activities and improve efficiency in threat detection and mitigation.
- Experience with handling Cybersecurity Incidents, preferably within cloud first environments.
- Experience creating and managing effective and efficient detection capabilities in SIEM, SaaS, SOAR or other relevant platforms.
- Hands on experience building detection logic for Cloud Environments (AWS,Azure,GCP)
- Demonstrated ability in threat hunting and developing and implementing SOAR automation.
- Ability to develop code for task automation in common scripting languages such as Python,
- PowerShell and Bash.
- Excellent analytical and problem-solving skills, with the ability to think critically and act decisively in high-pressure situations.
- Strong communication skills, capable of effectively articulating technical concepts to both technical and non-technical stakeholders.
Meet Your Recruiter
