Lead Engineer, Security Threat Analysis & Response

The role will also include supporting engineering efforts that facilitate incident handling. This may include work in SIEMs, SOAR platforms, EDR solutions, and Threat Intelligence Platforms (TIPs). A prime focus of the work will be on efficient Incident Response in dynamic cloud environments. You should also be able to adapt quickly and find creative ways to implement solutions in a fast-paced and high-profile technology landscape. You will work with the latest security tools, systems, and network technologies. A thirst for knowledge, a firm team-based mindset, a curious mind, and the desire to continuously stay abreast of new developments in the dynamic security space is a must. In This Role, You Will: Conduct and manage security incident investigations for both corporate and product environments Perform and lead Tier 2 and 3

responsibilities in support of Security Operations and Incident Response Mentor junior personnel in incident handling and investigations Help keep incident response plans, runbooks, and other business processes current Coordinate incident management functions between the Security Engineering and Operations Team, Technology resource stakeholders, and other internal support organizations (i.e. SRE, Legal, Networking), ensuring security is appropriately leading security incident handling Assist with optimizing and auditing threat detection capabilities and SIEM content development in support of incident detection and investigation capabilities Identify and plan automated incident response solutions in SOAR platforms or via other AWS native solutions Work with other Security and Technology personnel to ensure that Threat Intelligence is well integrated into the Incident Response process Track and report on security incident investigations Assist with the management and operations of incident response supporting platforms as needed Stay abreast of emerging technologies related to Cloud Security Engage in proactive Threat Hunting activities Contribute strategically to the technological direction of

the team and its programs Here's What You Need: 8+ years of experience in security engineering, security operations, or security incident response Bachelor’s Degree in Computer Science or related degree Solid familiarity with scripting in support of digital forensics and incident response, including the integration of various security tools Familiarity with incorporating cyber threat intelligence into incident response Experience investigating security incidents in AWS Cloud Some experience with the AWS platform and services such as Config, Security Hub, Lambda, CloudWatch, CloudTrail, S3, WAF, Guard Duty, Shield Ability to adapt to a hyper-growth pace and changing priorities Excellent problem solving and analytical skills; outstanding oral and written communication skills Familiarity with common classes of security tools: SIEM, DLP, WAF, NGAV, and Vulnerability Scanners Self-motivation and the ability to work under minimal supervision Preferred

Qualifications: Knowledge of high traffic and other cloud-based infrastructures and how they affect security needs (i.e. cloud infrastructure, AWS, Serverless SOA architectures) would be a plus Proficiency in Python or Java languages Proficiency with leading digital forensic tools, such as Magnet, Autopsy/the Sleuth Kit, volatility

A meeting lands on your calendar

If they’re a yes, I book the chat. You show up — that’s the whole job-hunt.