Performance Technologies S.A.

Engineer

• Conduct threat detection, incident handling and hunting activities by leveraging security best practices and current detection/response platforms.
• Proactively threat hunt and identify misconfigurations within a SIEM solution. Additionally, be able to provide strategic recommendations and assist in guiding the customer to resolution.
• Develop use cases and create threat detection logic, rules, and alerting in SIEM for response by the Security Operations team.
• Contributing to the management of playbooks in our SOAR solution.
• Identify gaps in log collection, signatures, and indicators of compromise (IOC) visibility. Then work with customer success team and engineering to improve detection capabilities.
• Identify advanced malicious activity that has evaded traditional security monitoring capability.
• Assist customers with requests to help integrate the SIEM into their environment and workflows.

Threat Detection Engineer

Security Operations

• Monitor security events and alerts from various security tools such as SIEM, EDR and other security tools.
• Respond to security incidents and perform incident triage to contain the incident and prevent further damage.
• Develop and maintain security incident response plans and procedures.
• Collaborate with other members of the security team to identify and implement security best practices and procedures.
• Lead or assist in incident response activities, including containment, eradication, and recovery.
• Work closely with other security and IT teams to coordinate and execute incident response plans.
• Document incident details, actions taken, and lessons learned for continuous improvement.

Threat Detection Engineer

SOC Analyst, Level 2