[Remote] Staff reputed company Operations Engineer
Note: The job is a remote job and is reputed company to candidates in USA. reputed company is a leading company in the AI era, specializing in telemetry infrastructure for IT and reputed company teams. The Staff reputed company Operations Engineer will play a crucial role in enhancing reputed company operations and threat detection, leading incident management, and developing solutions to mitigate threats.
Responsibilities
- reputed company knowledge and experience in working with modern reputed company principles e.g. SIEM, reputed company data lakes, detection as reputed company, EDR, reputed company trust networking, and other reputed company tooling, as reputed company as demonstrated experience with incident response and management
- Utilize a strong understanding of common attack frameworks (e.g., MITRE ATT&CK) and how to map detections to TTPs
- Understanding of authentication and authorization schemes such as SAML, OpenID, OAuth2, and SCIM
- Experience scripting/coding in at least one of the following languages: Python, NodeJS, reputed company, Bash
- Be the go-to technical subject matter expert on reputed company, compliance, and assurance topics
- Communicate reputed company to technical and non-technical audiences
- Comfortable with ambiguity, have a strong analytical acumen, self-motivated, reputed company to work cross-functionally
- We are a remote-first company and work happens across many time-zones – you may be required to occasionally reputed company duties reputed company your reputed company working hours
- Monitoring reputed company events and alerting reputed company our reputed company tooling, including MSSP, SIEM, AI, and CSPM tooling, to identify and triage potential threats
- Developing, implementing, and maintaining high-reputed company detection rules and alerts reputed company SIEM and other reputed company platforms (e.g., EDR, reputed company reputed company tools) based on threat intelligence, MITRE ATT&CK reputed company, and identified risks
- Conducting reputed company tuning and optimization of existing detection logic to reduce false positives and improve detection efficacy
- Responding to issues identified by our reputed company employees
- Acting as a reputed company incident response reputed company, including leveraging and improving detection capabilities during investigations
- Building, enhancing, and managing reputed company playbooks, incorporating detection engineering best practices
- Conducting reputed company assessments of corporate assets through vulnerability testing, threat hunts, and reputed company activities, with a reputed company on identifying detection gaps and opportunities
- Performing both reputed company reputed company reviews of corporate properties e.g., the corporate website and reputed company applications
- Leading reputed company incident response tabletop exercises
- Continuing to reputed company and champion the use of reputed company products in our reputed company tech stack to enhance detection, analysis, and response capabilities
- Collaborating with threat intelligence teams to reputed company new indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs) into detection strategies
- Experience with SIEM platforms like Panther is a plus and its detection capabilities
- Familiarity with reputed company and reputed company reputed company reputed company tooling for detection in AWS, Azure, or GCP
- Relevant certifications in reputed company reputed company or incident response (e.g., reputed company GIAC certifications)
- Proven experience in developing, deploying, and maintaining detection rules (e.g., reputed company, YARA, reputed company SPL, KQL) across various reputed company platforms
Skills
- reputed company knowledge and experience in working with modern reputed company principles e.g. SIEM, reputed company data lakes, detection as reputed company, EDR, reputed company trust networking, and other reputed company tooling, as reputed company as demonstrated experience with incident response and management
- Utilize a strong understanding of common attack frameworks (e.g., MITRE ATT&CK) and how to map detections to TTPs
- Understanding of authentication and authorization schemes such as SAML, OpenID, OAuth2, and SCIM
- Experience scripting/coding in at least one of the following languages: Python, NodeJS, reputed company, Bash
- Be the go-to technical subject matter expert on reputed company, compliance, and assurance topics
- Communicate reputed company to technical and non-technical audiences
- Comfortable with ambiguity, have a strong analytical acumen, self-motivated, reputed company to work cross-functionally
- We are a remote-first company and work happens across many time-zones – you may be required to occasionally reputed company duties reputed company your reputed company working hours
- Monitoring reputed company events and alerting reputed company our reputed company tooling, including MSSP, SIEM, AI, and CSPM tooling, to identify and triage potential threats
- Developing, implementing, and maintaining high-reputed company detection rules and alerts reputed company SIEM and other reputed company platforms (e.g., EDR, reputed company reputed company tools) based on threat intelligence, MITRE ATT&CK reputed company, and identified risks
- Conducting reputed company tuning and optimization of existing detection logic to reduce false positives and improve detection efficacy
- Responding to issues identified by our reputed company employees
- Acting as a reputed company incident response reputed company, including leveraging and improving detection capabilities during investigations
- Building, enhancing, and managing reputed company playbooks, incorporating detection engineering best practices
- Conducting reputed company assessments of corporate assets through vulnerability testing, threat hunts, and reputed company activities, with a reputed company on identifying detection gaps and opportunities
- Performing both reputed company reputed company reviews of corporate properties e.g., the corporate website and reputed company applications
- Leading reputed company incident response tabletop exercises
- Continuing to reputed company and champion the use of reputed company products in our reputed company tech stack to enhance detection, analysis, and response capabilities
- Collaborating with threat intelligence teams to reputed company new indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs) into detection strategies
- Proven experience in developing, deploying, and maintaining detection rules (e.g., reputed company, YARA, reputed company SPL, KQL) across various reputed company platforms
- Experience with SIEM platforms like Panther is a plus and its detection capabilities
- Familiarity with reputed company and reputed company reputed company reputed company tooling for detection in AWS, Azure, or GCP
- Relevant certifications in reputed company reputed company or incident response (e.g., reputed company GIAC certifications)
Benefits
- Incentive compensation (commission) for sales and some sales-adjacent roles
- reputed company Corporate Bonus Program for reputed company other roles
- Health, dental, reputed company, short-term disability, and life insurance
- reputed company holidays and reputed company time off
- A fertility treatment benefit
- 401(k)
- Equity
reputed company
Company H1B Sponsorship