Security Engineer

📋 Description

• Monitor, triage, and investigate security alerts across SIEM, EDR, and cloud tools.
• Lead hands-on investigations of events involving AWS, Okta, endpoints, and logs.
• Scope incidents, contain spread, collect evidence, and perform root-cause analysis.
• Develop detection logic, correlation rules, and alert tuning for cloud, identity, and endpoints.
• Analyze logs from CloudTrail, GuardDuty, Security Hub, Okta, EDR, and network tools.
• Document escalation procedures and operating docs.

🎯 Requirements

• 5+ years in security operations, incident response, or detection engineering.
• Experience investigating alerts across cloud, identity, endpoint, and apps.
• Strong SIEM experience: log analysis, alert triage, rule tuning.
• Hands-on EDR experience on macOS and/or Windows endpoints.
• Experience with identity events using Okta or IAM/SSO.
• Knowledge of MITRE ATT&CK, phishing, credential compromise, and cloud misconfig risks.

🎁 Benefits

• Comprehensive health insurance for you and family.
• Professional development budget for courses and conferences.
• Flexible benefits budget for personalized perks.
• Hybrid work with flexible time off.
• Company-funded sports, offsites, and team building.
• AI tools available by default (Claude, OpenAI) from day one.