Responsibilities

The Specialist will perform threat monitoring investigations, including deep dive analysis of security operations escalations, incident triage, and root cause analysis using open source and proprietary tools. They will build, maintain, and enhance the security operations technology stack, manage detection use case life cycles, and relentlessly automate workflows by incorporating AI. The role involves leading end-to-end Incident Response, providing guidance during investigations, driving containment, mitigation, and other security outcomes. Additionally, the Specialist will develop, deploy, and maintain advanced cloud security controls, configure and deploy cloud-native security controls, and lead projects related to Cloud Security Posture Management (CSPM), Container Security, Native Cloud Security Enhancements, Runtime Vulnerability Management, Endpoint Security enhancements, Threat Hunting, Compromise Assessments, and Network/Endpoint/Cloud security reviews. They will also be comfortable with cross-functional leadership and stakeholder management, and willing to lead and nurture a small team of junior security specialists.