Responsibilities

The Specialist will perform threat monitoring investigations, including deep dives into security operations escalations and root cause analysis, utilizing open source and proprietary tools. They will build, maintain, and enhance the security operations technology stack, focusing on next-generation SIEM and SOAR solutions, and manage the detection use case lifecycle. The role involves leading incident response efforts, providing guidance during investigations and incidents, and developing advanced cloud security controls. Additionally, the Specialist will lead projects related to Cloud Security Posture Management (CSPM), Container Security, Native Cloud Security Enhancements, Runtime Vulnerability Management, Endpoint Security enhancements, Threat Hunting, Compromise Assessments, and Network/Endpoint/Cloud security reviews, while also being comfortable with cross-functional leadership and stakeholder management, and nurturing a small team of junior security specialists.