Security Operations

• The Senior Incident Response Engineer will lead advanced security incident response efforts
• focusing on Microsoft E5 security capabilities and Data Loss Prevention (DLP)
• Detect, analyze, and respond to security incidents detected by EDR, SIEM, and Cloud Security tooling as well as MDR service providers
• Lead post-incident reviews and drive process improvements
• Perform advanced threat hunting using Microsoft Defender and related tools
• Integrate threat intelligence and adapt detection strategies based on real world threats observed by the organization
• Conduct forensic data acquisition, log analysis, and root cause determination for endpoint incidents
• Develop and maintain incident response playbooks and runbooks across the security operations toolset
• Collaborate with analysts and other IR engineers to identify opportunities for improvement and tuning of detection rules
• Collaborate with IT, legal, HR, communications, and other business units

Senior Security Incident Response Engineer

Senior Manager, Regional Security Operations

Security Operations Vulnerability Analyst II

Staff Portfolio Manager, Cybersecurity Operations

Security Operations Center Analyst