Security Engineer III

📋 Description

• SIEM engineering: onboard/normalize logs, build parsers, and ensure high-fidelity data pipelines.
• Detection engineering: develop detections with version control and MITRE ATT&CK mapping.
• SOAR and automation: create automated workflows and playbooks to streamline triage and response.
• AI-augmented security operations: explore AI/ML to boost alert triage, response, and intel.
• Threat intelligence integration: ingest feeds and context into detection logic and tooling.
• Threat hunting and incident response support: proactive hunts and IR assistance.

🎯 Requirements

• Technical security experience in security engineering or DevSecOps; cloud-native security.
• Detection and response: SIEM detections, hunting queries, and IR activities.
• SecOps tooling: experience with SIEM (Splunk, Microsoft Defender), EDR/XDR, scanners, and ticketing.
• Threat intelligence and hunting: experience with intel platforms (MISP, Recorded Future) and hunting methods.
• Scripting and automation: Python/Go/Bash to build tooling and automate workflows.
• Application security knowledge: secure SDLC, OWASP top risks, and remediating findings with developers.