Infosec Security - Senior Engineer

Key Responsibilities

• Lead security monitoring, threat detection, and incident response activities across enterprise environments.
• Define and enhance SIEM monitoring strategies, alerting mechanisms, and threat detection capabilities.
• Perform advanced log analysis, event correlation, and threat investigations across multiple security data sources.
• Lead triage and investigation of complex security incidents, advanced threats, and suspicious activities.
• Analyze attack patterns by using MITRE ATT&CK, cyber kill chain methodologies, and threat intelligence insights.
• Develop and optimize security use cases, detection logic, correlation rules, and monitoring content.
• Perform advanced security analytics and threat-hunting activities to proactively identify potential risks.
• Analyze Windows and Linux security events, system behaviors, and operational anomalies.
• Utilize scripting and querying techniques to automate analysis, improve visibility, and enhance operational efficiency.
• Review incident investigations and ensure adherence to security operations standards and response procedures.
• Mentor junior analysts on threat detection, incident response, SIEM operations, and investigation best practices.
• Collaborate with various teams and stakeholders to support enterprise security operations and incident management.
• Drive continuous improvement initiatives focused on detection effectiveness, operational maturity, and threat visibility.

Behavioral Competencies

• Demonstrates strong ownership while driving security operations excellence.
• Collaborate effectively with various teams and business stakeholders to ensure smooth delivery.
• Promotes proactive threat detection and continuous improvement in security operations.
• Apply strong analytical thinking to evaluate complex security incidents and emerging threats.
• Demonstrates adaptability while managing evolving attack techniques, technologies, and business requirements.
• Communicates effectively regarding security incidents, risks, findings, and improvement opportunities.
• Maintains high attention to detail across investigations, threat analysis, and operational activities.
• Encourages continuous improvement in security monitoring, threat detection, and incident response practices.
• Supports knowledge sharing and mentoring to strengthen security operations capabilities.
• Balances operational effectiveness, risk management, and business priorities while driving security excellence.