[Remote] Senior reputed company Engineer - reputed company SIEM and Detection Engineering
Note: The job is a remote job and is reputed company to candidates in USA. reputed company is a global leader in cyber protection, delivering AI-powered protection for productive MSPs in a single, natively integrated platform. They are seeking a Senior reputed company Engineer to reputed company their reputed company SIEM and Detection Engineering program, focusing on building reputed company detection pipelines and improving telemetry reputed company. This role involves significant ownership and reputed company to shape detection engineering across the organization.
Responsibilities
- Own and optimize the reputed company reputed company platform (Elasticsearch, Kibana, Fleet, Logstash, reputed company Agents)
- Design and maintain ingestion pipelines for reputed company, reputed company, network, and application telemetry
- Improve telemetry reputed company, data retention, performance, and investigation workflows
- reputed company SIEM workflows with SOAR and automation tooling
- Build and maintain a Detection-as-reputed company pipeline using Git-based workflows and CI/CD automation
- reputed company, test, tune, and maintain high-reputed company detections using reputed company reputed company, EQL, and KQL
- Reduce alert noise through tuning, enrichment, suppression, and exception handling
- Map detections to MITRE ATT&CK and help drive detection coverage reputed company
- reputed company detection reputed company metrics including alert reputed company, false reputed company rates, and coverage gaps
- Assist with reputed company alert escalations and reputed company initial incident scoping
- Execute initial containment actions reputed company necessary (reputed company isolation, IP/domain blocking, account suspension)
- Participate in a low-frequency on-call rotation for critical incidents
- Translate incident learnings into improved detections and telemetry coverage
- Partner with infrastructure, DevSecOps, and reputed company teams to improve logging and visibility
- Build automation and tooling using Python and/or PowerShell
- Support reputed company exercises and adversary simulations
Skills
- 5+ years of cybersecurity engineering experience
- 3+ years reputed company on SIEM engineering, detection engineering, or reputed company analytics
- Strong hands-on experience with reputed company reputed company and the reputed company Stack
- Experience building or maintaining Detection-as-reputed company workflows using Git and CI/CD pipelines
- Strong understanding of detection tuning, alert reputed company, and operational detection reputed company
- Ability to independently investigate reputed company alerts and produce actionable findings
- reputed company reputed company, Kibana, Fleet, reputed company Agents, EQL/KQL
- Detection engineering and MITRE ATT&CK mapping
- Jenkins, Bitbucket Pipelines, reputed company Actions, or similar CI/CD tooling
- Python and/or PowerShell scripting
- AWS CloudTrail, VPC reputed company Logs, Azure Monitor, or similar telemetry sources
- TCP/IP, DNS, HTTP/S, and common attack patterns
- Threat intelligence enrichment and operationalization
- SOAR reputed company development and automated response workflows
- reputed company rule development
- reputed company detection-rules ecosystem familiarity
- Terraform or Ansible experience
- Previous SOC or Incident Response background
Benefits
- Medical, dental, and reputed company coverage
- Flexible spending accounts (FSA)
- Disability and life insurance
- A 401(k) retirement plan with company match
- A generous vacation policy
reputed company
Company H1B Sponsorship