Senior Security Engineer, SOC

Responsibilities

• Monitor and analyze security event logs and alerts to detect potential incidents, and lead investigations for containment, eradication, and recovery.
• Lead security incident investigation, containment, eradication, and recovery activities.
• Monitor AWS Security tools including GuardDuty, CloudTrail, IAM, AWS WAF, Shield, VPC Flow Logs to monitor and secure cloud workloads.
• Perform in-depth analysis of sophisticated security incidents and targeted attacks across systems, networks, and code to identify root causes and prevent recurrence.
• Enhance detection and response capabilities through automation, including fine-tuning alerts to reduce false positives and automating responses to repetitive incidents.
• Develop and maintain incident response playbooks for distinct types of security incidents, ensuring they align with current threats.
• Leverage IOCs, threat intelligence, and other data sources to enrich security events, improving detection accuracy and reducing incident response time.
• Work with security stakeholders and cross-functional teams to coordinate incident response efforts and improve overall security initiatives.
• Conduct proactive threat hunting to identify potential malicious activities and mitigate emerging risks before they escalate.
• Collaborate with Product security and infrastructure security team to conduct vulnerability scans, penetration tests, and risk assessments to uncover weaknesses in the security posture.
• Collaborate with IT and development and other relevant stakeholders to identify and contain the incident till to ensure timely patching and remediation of vulnerabilities.

Required Experience :

6-Month Accomplishments :

12+ Month Accomplishments :

Good to have :

Coding Skills : Proficient in coding languages like Python or Go