Security Threat Detection Architect/Manager
2 months ago
- This is a remote position
Responsibilities:
· Ideate, design, develop, test, monitor, and tune high-quality detections to ensure security analysts have the ability to respond to security threats
· Write complete and well-documented alerting and detection strategies to ensure the security analysts and incident responders have the necessary context and runbooks to respond to detections
· Build, maintain, and improve custom detection and alerting solutions, or work with existing commercial tools to ensure they are tuned properly to meet detection coverage needs
· Act as a subject matter expert for security-relevant logs and data to assist Incident Response team during high-priority investigations
· Collaborate with Threat Intelligence team to ensure detections have a meaningful impact on improving security posture
Required Skills:
· 5-7 years experience with hands-on experience with full-lifecycle detection engineering in support of a security operations team
· Experience as a Security Operations Analyst or Incident Responder
· Comfortability operating in Splunk or other common SIEM and SOAR solutions
· Technical depth in one or more of the following specialties: application security, cloud security, digital forensics, malware analysis, threat hunting, incident response or some combination thereof
· Familiarity with SQL, relational databases, and data warehousing
· Basic Python (or other scripting language) experience in order to automate tasks within case management and CI/CD environment
· Experience with defining, collecting, and analyzing various metrics that exhibit the purpose and success of a maturing Detection Engineering program (i.e. MITRE ATT&CK coverage)
· Demonstrated knowledge of threat actor techniques, vulnerabilities, and exploits, and how those present themselves within logs and various endpoint/network artifacts
· Excellent communication and collaboration skills
· Ability to work with a high degree of autonomy
· Excellent analytical skills
· Collaborative team worker – both in person and virtually using WebEx or similar
· Excellent documentation skills; demonstrated proficiency in Microsoft Office including Word, Excel, and PowerPoint
· Ability to work as liaison between business and information security / information technology
· Flexibility to accommodate working across different time zones
· Excellent interpersonal communication skills with strong spoken and written English
· Business outcomes mindset
· Solid balance of strategic thinking with detail orientation
· Self-starter, ability to take initiative
· Project management and organizational skills with attention to detail
Preferred Skills:
· Relevant industry certifications
· Experience working with and creating detections as Sigma rules
· Formal software engineering, DevOps, or data science experience from prior jobs, trainings, or academia
· Hands-on experience building tools and solutions within a public cloud environment, preferably AWS
· Splunk engineering/administration experience
· Experience with PCI-DSS, FedRAMP, and other compliance frameworks and their associated logging and detection requirements
Required Education:
· Bachelor's degree (BA/BS) from four-year college or university; or equivalent training, education, and work experience
· Cybersecurity certifications such as CISSP, CISM, etc.
Powered by JazzHR
htxm0kM3j1
-
Blue Team
2 months ago
Atlanta, United States Airitos Full timeSecurity Threat Detection Engineer Consultant This is a remote position Responsibilities: · Ideate, design, develop, test, monitor, and tune high-quality detections to ensure security analysts have the ability to respond to security threats · Write complete and well-documented alerting and detection strategies to ensure the security analysts and incident...
-
Blue Team
3 weeks ago
Atlanta, United States Airitos Full timeSecurity Threat Detection Engineer Consultant This is a remote position Responsibilities: · Ideate, design, develop, test, monitor, and tune high-quality detections to ensure security analysts have the ability to respond to security threats · Write complete and well-documented alerting and detection strategies to ensure the security analysts and incident...
-
Blue Team
4 weeks ago
Atlanta, United States Airitos Full timeSecurity Threat Detection Engineer Consultant This is a remote position Responsibilities: · Ideate, design, develop, test, monitor, and tune high-quality detections to ensure security analysts have the ability to respond to security threats · Write complete and well-documented alerting and detection strategies to ensure the security analysts and incident...
-
Blue Team
2 weeks ago
Atlanta, United States Airitos Full timeSecurity Threat Detection Engineer Consultant This is a remote position Responsibilities: Ideate, design, develop, test, monitor, and tune high-quality detections to ensure security analysts have the ability to respond to security threats Write complete and well-documented alerting and detection strategies to ensure the security analysts and incident...
-
Blue Team
1 day ago
Atlanta, United States Airitos Full timeJob DescriptionJob DescriptionSecurity Threat Detection Engineer ConsultantThis is a remote positionResponsibilities:· Ideate, design, develop, test, monitor, and tune high-quality detections to ensure security analysts have the ability to respond to security threats· Write complete and well-documented alerting and detection strategies to ensure the...
-
Blue Team
3 weeks ago
Atlanta, United States Airitos Full timeJob DescriptionJob DescriptionSecurity Threat Detection Engineer ConsultantThis is a remote positionResponsibilities:· Ideate, design, develop, test, monitor, and tune high-quality detections to ensure security analysts have the ability to respond to security threats· Write complete and well-documented alerting and detection strategies to ensure the...
-
Atlanta, United States Motion Recruitment Full timeWe are partnered with one of the top insurance companies who is dedicated to provide personalized, affordable, and accessible healthcare solutions to millions of individuals and organizations globally. They are currently seeking a Threat Detection Engineer to join their dynamic and innovative Cybersecurity team. In this role, you will be responsible for the...
-
Atlanta, United States Motion Recruitment Full timeWe are partnered with one of the top insurance companies who is dedicated to provide personalized, affordable, and accessible healthcare solutions to millions of individuals and organizations globally. They are currently seeking a Threat Detection Engineer to join their dynamic and innovative Cybersecurity team. In this role, you will be responsible for the...
-
Atlanta, United States Motion Recruitment Full timeWe are partnered with one of the top insurance companies who is dedicated to provide personalized, affordable, and accessible healthcare solutions to millions of individuals and organizations globally. They are currently seeking a Threat Detection Engineer to join their dynamic and innovative Cybersecurity team. In this role, you will be responsible for the...
-
Atlanta, United States Motion Recruitment Full timeWe are partnered with one of the top insurance companies who is dedicated to provide personalized, affordable, and accessible healthcare solutions to millions of individuals and organizations globally. They are currently seeking a Threat Detection Engineer to join their dynamic and innovative Cybersecurity team. In this role, you will be responsible for the...
-
Atlanta, United States Motion Recruitment Full timeWe are partnered with one of the top insurance companies who is dedicated to provide personalized, affordable, and accessible healthcare solutions to millions of individuals and organizations globally. They are currently seeking a Threat Detection Engineer to join their dynamic and innovative Cybersecurity team. In this role, you will be responsible for the...
-
Information Security Architect
4 weeks ago
Atlanta, United States The Intersect Group Full timeThe Intersect Group is looking for a Principal Information Security Architect that will be in charge of implantation of security for various projects. We are looking for someone that has experience with Threat Modeling, end point security, incident management, and someone who is able to perform a root cause analysis and define security requirement. Job...
-
Splunk Detection Engineer
1 month ago
Atlanta, United States Motion Recruitment Full timeA leading health insurance company is looking to grow out their IT team. This company is dedicated to improving the health and well-being of people across the United States. They are currently looking for a Splunk Detection Engineer who will play a critical role in ensuring the security of their systems and data. You will be responsible for developing and...
-
Splunk Detection Engineer
3 weeks ago
Atlanta, United States Motion Recruitment Full timeA leading health insurance company is looking to grow out their IT team. This company is dedicated to improving the health and well-being of people across the United States. They are currently looking for a Splunk Detection Engineer who will play a critical role in ensuring the security of their systems and data. You will be responsible for developing and...
-
Splunk Detection Engineer
1 month ago
Atlanta, United States Motion Recruitment Full timeA leading health insurance company is looking to grow out their IT team. This company is dedicated to improving the health and well-being of people across the United States. They are currently looking for a Splunk Detection Engineer who will play a critical role in ensuring the security of their systems and data. You will be responsible for developing and...
-
Splunk Detection Engineer
1 month ago
Atlanta, United States Motion Recruitment Full timeA leading health insurance company is looking to grow out their IT team. This company is dedicated to improving the health and well-being of people across the United States. They are currently looking for a Splunk Detection Engineer who will play a critical role in ensuring the security of their systems and data. You will be responsible for developing and...
-
Splunk Detection Engineer
3 weeks ago
Atlanta, United States Motion Recruitment Full timeA leading health insurance company is looking to grow out their IT team. This company is dedicated to improving the health and well-being of people across the United States. They are currently looking for a Splunk Detection Engineer who will play a critical role in ensuring the security of their systems and data. You will be responsible for developing and...
-
Mgr-Information Security
4 weeks ago
Atlanta, United States Marriott Full timeJob Number 24081565 Job Category Information Technology Location Marriott International HQ, 7750 Wisconsin Avenue, Bethesda, Maryland, United States Schedule Full-Time Located Remotely? Y Relocation? N Position Type Management JOB SUMMARY Seeking a proactive manager to lead threat hunting efforts, analyzing security logs and network traffic to...
-
Network Security Architect
2 weeks ago
Atlanta, United States Warner Media, LLC Full timeEvery great story has a new beginning, and yours starts here. Welcome to Warner Bros. Discovery… the stuff dreams are made of. Who We Are… When we say, “the stuff dreams are made of,” we’re not just referring to the world of wizards, dragons and superheroes, or even to the wonders of Planet Earth. Behind WBD’s vast portfolio of iconic content and...
-
Network Security Architect
2 weeks ago
Atlanta, United States CareerBuilder Full timeWelcome to Warner Bros. Discovery the stuff dreams are made of. Who We Are When we say, the stuff dreams are made of, were not just referring to the world of wizards, dragons and superheroes, or even to the wonders of Planet Earth. Behind WBDs vast portfolio of iconic content and beloved brands, are the storytellers bringing our characters to life, the...
