Collect, analyze, and operationalize threat intelligence for proactive detection.
Develop, optimize, and maintain SIEM queries; build dashboards and saved searches.
Plan and lead hypothesis-driven threat hunts; translate results into detections and runbooks.

🎯 Requirements

2–4 years in large-scale enterprise security; cloud exposure.
Foundational cloud knowledge (Azure, AWS, or GCP) for security monitoring.
Hands-on with 2+ SIEM platforms (Splunk, Sentinel, ELK).
Monitor, validate, and escalate SIEM alerts per runbooks and SLAs.
Plan and execute threat hunts using hypothesis-driven methods.
Detection-as-Code experience; familiarity with NIST 800-53.

🎁 Benefits

Flexible work model with home or office options.
Perks include paid parental leave and certification reimbursement.
Digital mental health support and comprehensive insurance.
Opportunities for professional growth.

Apply on employer's website

This employer gathers applications via their own applicant tracking system.

You will be redirected to an external application form.

Share job

Meet JobCopilot: Your Personal AI Job Hunter

Automatically Apply to Engineering Jobs. Just set your preferences and Job Copilot will do the rest — finding, filtering, and applying while you focus on what matters.

Activate JobCopilot