Blue Team Lead Security Engineer

Position Overview

Raya is seeking a highly skilled and experienced Blue Team Lead Security Engineer to join our dynamic cybersecurity team. In this role, you will be a key player in safeguarding our organization's assets by leading and enhancing our defensive security capabilities. You will be responsible for proactively identifying, analyzing, and mitigating security threats, as well as mentoring and guiding other security team members. The ideal candidate possesses a deep understanding of security principles, advanced technical expertise, and a passion for staying ahead of the ever-evolving threat landscape.

Company Information

Raya is a technology company that operates an exclusive, membership-based social network, comprising two primary applications. The Raya application facilitates social networking, emphasizing connections among individuals within creative industries, and requires a selective application process. Raya App, Inc., also offers "Places," a travel application that provides curated destination recommendations. Both applications underscore the company's focus on fostering private online communities and upholding values such as trust, respect, and privacy.

Employment Type

Full-time

Benefits

• Comprehensive medical and dental coverage
• $50 a day food delivery budget
• Equity based employment
• Great culture
• Learning opportunities
• Unlimited vacation
• 12 weeks paid parental leave
• $1,000 annual travel stipend for exploration

Responsibilities

Security Monitoring and Incident Response

• Lead real-time security monitoring efforts, including analyzing logs and providing incident response coverage and support.
• Triage and investigate security alerts, identify root causes, and implement effective containment and remediation strategies.
• Develop and maintain incident response plans and procedures.

Threat Detection and Rule Writing

• Design, develop, and implement threat detection rules and alerts to identify malicious activity.
• Continuously improve detection capabilities based on emerging threats and vulnerabilities.
• Optimize security tools and technologies for efficient and effective threat detection.

Incident Visibility and Response

• Increase signal fidelity and reduce false positives in our Security Information and Event Management (SIEM) system.
• Develop and implement strategies to improve the quality and relevance of security data within the SIEM.
• Customize and configure the SIEM to meet specific security needs and objectives.

Threat Intelligence Integration

• Integrate and operationalize threat intelligence feeds to enhance detection and prevention capabilities.
• Analyze threat intelligence reports to identify relevant threats and vulnerabilities.
• Develop and implement proactive measures to defend against known and emerging threats.

Security Systems Development

• Create and implement systems and processes to improve event analysis and correlation (e.g., leveraging AI, machine learning, and automation).
• Develop tools and scripts to automate security tasks and improve efficiency.
• Evaluate and recommend new security technologies and solutions.

Security Scanning and Vulnerability Management

• Create, configure, and manage security scanners for vulnerability assessments and penetration testing.
• Conduct regular vulnerability scans and analyze results to identify security weaknesses.
• Prioritize and track vulnerabilities, and work with relevant teams to ensure timely remediation.

Threat Hunting

• Conduct proactive threat hunting activities to identify and investigate potential security threats that may evade traditional detection methods.
• Develop and utilize threat hunting methodologies and techniques.
• Analyze network traffic, system logs, and other data sources to uncover malicious activity.

Vulnerability and Security Scanning

• Perform regular vulnerability scanning of systems and applications.
• Conduct security assessments to identify potential weaknesses.