Global Security Operations Engineer
Core
Senior technical role leading complex security investigations, threat detection optimization, and automation to strengthen the firm's ability to detect, investigate, respond to, and recover from cybersecurity threats across a global environment.
Role type
Senior IC Security Operations Engineer (Incident Response & Detection)
Builds
Automated detection playbooks, SOAR workflows, and threat hunting capabilities for a global security operations function
Domain
Cybersecurity / Security Operations
Required skills
Advanced incident response and investigation, SIEM and EDR platform expertise, Security automation and scripting (KQL, PowerShell, Python), SOAR playbook design, MITRE ATT&CK framework knowledge, Host and network forensics, Malware triage, Cloud and hybrid environment security
Preferred skills
Microsoft security technologies (Sentinel, Defender XDR, Entra ID, Azure), Global federated security model experience, ISO 27001 and NIST Cybersecurity Framework familiarity
Technologies
Microsoft Sentinel, Microsoft Defender XDR, Microsoft Entra ID, Microsoft Azure, Logic Apps, KQL, PowerShell, Python
Responsibilities
Serve as senior escalation point for high-severity security incidents; Conduct detailed investigations to establish initial access vectors and scope of compromise; Design and maintain detection content mapped to MITRE ATT&CK; Develop automated response playbooks and SOAR workflows; Perform host and network forensics and malware triage; Conduct proactive threat hunting to identify suspicious activity; Translate technical findings into business risk statements for leadership
Seniority
Senior, hands-on IC
