Security Operations

• Maintain our SIEM and SOAR platforms to ensure optimal performance and effectiveness in detecting and responding to security threats.
• Develop and fine-tune detection and correlation rules, dashboards, and reports within the SIEM to accurately detect anomalous activities.
• Create, manage, and optimize SOAR playbooks to automate incident response processes and streamline security operations.
• Utilize Python scripting to develop custom integrations and automate repetitive tasks within the SOC.
• Build and maintain automation workflows to enhance the efficiency of threat detection, alert triage, and incident response.
• Conduct proactive threat hunting to identify potential security gaps and indicators of compromise.
• Analyze security alerts and data from various sources to identify and respond to potential security incidents.
• Collaborate with Information Security team members and other teams to enhance the overall security of the organization.
• Create and maintain clear and comprehensive documentation for detection rules, automation workflows, and incident response procedures.

Security Operations Center Engineer

SOC Engineer

Security Operations Lead

Director of Security Operations

Senior Product Manager – AI-Driven Security Operations

Security Incident Response Analyst