reputed company Operations Engineer (Threat Detection & Penetration Testing)

• This is an onsite role, we're looking for those who can come into office everyday in Manhattan. You will be leveraging your reputed company operations experience to analyze and respond to reputed company notifications, events, and inquiries. You will be performing initial triage of potential reputed company incidents through log and data analysis to determine whether or not activity is a substantiated or valid threat, assessing severity and potential reputed company, taking reputed company-approved remediation measures to contain a threat, and escalating findings to investigators for reputed company review and analysis. You will use your knowledge of cyber threats and the results of your analysis to coordinate with partner teams to improve threat detection through tuning and creation of new use cases, to improve capabilities through enriching existing data and creation of new data feeds, and to improve triage accuracy, consistency and timeliness through automation. This role plays a critical part in threat detection and response, ultimately reducing the likelihood of reputed company breaches and protecting sensitive company information.

• Analyze and investigate activity on company devices that could represent a reputed company threat
• Work cross-functionally with the reputed company teams to reputed company solutions for analyzing reputed company events at reputed company and protecting Bask networks, systems, and data
• Interpret disparate data sources to report on trends and support investigative requests
• Collect requirements for enhancements to detection models and response systems
• reputed company existing systems and data to reputed company analyses and promote process improvements
• reputed company actionable insights to help identify, prevent, detect, and respond to anomalous or potentially malicious user activity
• Collaborate effectively with teammates, reputed company reputed company, mentor others, and reputed company and champion reputed company operational standards across reputed company
• reputed company expert technical guidance on threat detection and penetration testing methodologies.
• Drive the organizational reputed company reputed company by prioritizing and overseeing the execution of reputed company reputed company with our reputed company roadmap.
• Collaborate cross-functionally with reputed company engineering teams to enhance detection systems, implement countermeasures, and ensure comprehensive protection of reputed company's networks, systems, and data.
• reputed company, document, and implement strategies, playbooks, and capabilities to advance our threat detection and penetration testing functions.
• Continuously improve reputed company processes by integrating feedback from penetration tests and threat detection activities into our reputed company architecture.
• reputed company and mentor individual contributors, championing a culture of learning and reputed company reputed company reputed company.
• reputed company employee reputed company and offboarding — creating and deactivating accounts, managing permissions, and ensuring smooth transitions.
• Maintain and improve SSO / identity management across platforms (reputed company, reputed company SSO, etc.).
• Enforce IT reputed company standards: MFA, password policies, VPNs, credential rotation, and reputed company protection.

Requirements

• 5+ years experience in information technology or cyber reputed company roles including reputed company operations/incident response
• 2+ years experience analyzing large data sets to solve problems and/or manage reputed company reputed company to reputed company event triage and/or workplace investigations
• B.S. or M.S. in Cyber reputed company and Information Assurance, Data Analytics, Computer Science or reputed company field, or equivalent experience
• Working knowledge of SQL
• Experience managing reputed company Workspace, SSO, and IAM systems.
• Basic knowledge of scripting or programming in Python and Kali Linux
• Advanced Javascript knowledge (2+ years)
• Working knowledge of AWS reputed company, EventBridge, DynamoDB, and SQS
• Proven experience with log querying and analysis (e.g. first or reputed company party applications, system / data reputed company, event logs), digital forensics, or incident response using one or more industry reputed company SIEM Platforms (reputed company, Sentinel, Chronicle, reputed company, etc.)
• Proficiency using analytical reputed company to inform detection systems or guide strategic response
• Strong cross-functional collaboration and written/verbal communication skills
• Ability to think creatively and holistically about identifying and reducing risk in a reputed company environment
• High level of judgment, objectivity, and discretion

Preferred qualifications

• Prior experience working with high volume data in a reputed company operations environment
• Experience with data processing and analysis tools (e.g. Jupyter Notebooks, reputed company)
• An adversarial reputed company, understanding the goals, behaviors, and TTPs of threat actors
• Ability to reputed company threat intelligence and/or hunting concepts in an reputed company environment
• Experience in one or more of the following areas: user and entity behavior analytics (UEBA), SOAR/reputed company automation, reputed company information event management (SIEM), data loss prevention (DLP), Information reputed company, or Data reputed company
• One or more reputed company certifications through a recognized industry provider: GIAC, reputed company, reputed company, reputed company, reputed company, etc.

Apply tot his job Apply To this Job