Assist with or lead threat investigations, incident response, and vulnerability management activities.
Provide rotating on-call support for enterprise security operations and documentation.
Act as a technical SME in incident detection, analysis, and response, leveraging data from Splunk, CrowdStrike Falcon, and Proofpoint TAP to support investigations and remediation.
Develop, tune, and maintain detection content — including SIEM rules, correlation logic, and alert playbooks — to improve fidelity and reduce mean time to detect (MTTD).
Apply deep technical knowledge to secure systems and network architecture across diverse platforms.
Work independently toward defined cybersecurity objectives while maintaining clear communication with stakeholders during active incidents and investigations.
Contribute actively to technical discussions within multidisciplinary engineering teams.
Strengthen solutions through hands-on development, design improvements, and implementation.
Support and execute security projects, enterprise architecture, POCs, and remediation efforts.
Develop and update organizational security policies, standards, and technical guidance.

Requirements

Hands-on experience with secure architecture across OS, cloud, network, database, and application layers.
Proficiency in at least one scripting or programming language (Python, Perl, Shell/PowerShell, C/C++, Assembly).
Experience participating in security incident response, vulnerability remediation, and security operations.
Ability to support enterprise security systems in a rotating on‑call schedule.
Hands-on experience with incident response lifecycle management — including containment, eradication, and recovery — within complex enterprise networks.
Experience with SIEM platforms, EDR tooling, and email security solutions; hands-on experience with Splunk, CrowdStrike Falcon, and Proofpoint is strongly preferred.
Working knowledge of threat intelligence frameworks (MITRE ATT&CK) and their application to detection and response operations.
Working knowledge of attacker methodology and penetration testing techniques.

Benefits

Health insurance
401(k) matching
Paid time off
Flexible work hours
Professional development opportunities

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

incident responsevulnerability managementdetection content developmentSIEM rulescorrelation logicscriptingprogrammingsecure architecturethreat intelligence frameworkspenetration testing techniques

Soft Skills

clear communicationindependent worktechnical discussionscollaboration