Senior Cybersecurity Engineer | Cyber Threat Intelligence & Response
Core
Lead incident response and threat hunting across platforms, triaging, investigating, containing, and eradicating security events to strengthen detection coverage.
Role type
Senior IC cybersecurity engineer (incident response & threat intelligence)
Builds
Automated incident response workflows, playbooks, and new detections using MITRE ATT&CK and threat intelligence.
Domain
Cybersecurity, Incident Response, Threat Intelligence
Required skills
Incident response lifecycle management, log analysis (HTTP, SMTP, network), host and network forensics, malware triage, threat hunting, SIEM investigation, EDR, identity management, API security, scripting (Python, PowerShell), MITRE ATT&CK framework, Cyber Kill Chain mapping, ITIL processes.
Preferred skills
GCIH, GCFA, AZ-500, SC-100 certifications, Jupyter Notebooks, SOAR automation building.
Technologies
Microsoft Sentinel, KQL, EDR, Active Directory, Windows, PDF analysis tools.
Responsibilities
Own incidents from detection to recovery, lead live incident response, perform host/network forensics and malware triage, hunt proactively for threats, build and automate response workflows, tune detection coverage, analyze threat intelligence.
Seniority
Senior, hands-on IC
