About the Opportunity
We are excited to present an exceptional opportunity for a skilled Detection Engineer to join a cutting-edge cybersecurity firm. This industry leader is at the forefront of protecting critical business assets through advanced threat detection and response mechanisms. They are expanding their team to further strengthen their capabilities in safeguarding valuable digital assets in an ever-evolving threat landscape.
Role Overview
This is a 12 month, contract-to-hire, remote position for a Detection Engineer. The role is crucial in implementing, maintaining, and advancing threat detection mechanisms to protect critical business operations, with a particular focus on Google Cloud environments.
Key Responsibilities
- Utilize the MITRE ATT&CK Framework for threat detection creation, gap assessment and analysis. - Implement, configure, and maintain security detection rules and mechanisms, including intrusion detection, anomaly detection, and log analysis tools, to identify and respond to security incidents. - Play a critical role in the day-to-day security operations, including monitoring, tuning, analysis, and proactive threat hunting. - Lead incident response efforts, investigate security incidents, conduct root cause analysis, and implement corrective measures. - Apply expertise in Kubernetes for incident response and forensic analysis. - Develop and maintain automation scripts and tools to streamline security detection operations and response. - Build, design, run, and troubleshoot playbooks within a SOAR (Security Orchestration, Automation, and Response) solution to automate incident response processes. - Maintain comprehensive documentation of security detection configurations, incident response procedures, and investigations. - Stay up-to-date with the latest security threats, vulnerabilities, and industry trends to proactively enhance security detection measures.
Qualifications
- Bachelor's degree in Computer Science, Information Security, or related field (Master's preferred) - Google Cloud Professional Cloud Security Engineer certification or equivalent experience - Strong proficiency in Python for security automation and scripting - Experience with cloud security detection tools, particularly in Google Cloud environments - Expertise in Kubernetes incident response and forensic analysis - Familiarity with MITRE ATT&CK Framework and SIEM solutions (e.g., Splunk Enterprise Security) - Excellent problem-solving, analytical, and communication skills
Preferred Certifications
- CISSP, GCIH, GCIA - Certified Kubernetes Administrator (CKA) - Relevant Splunk certifications
This challenging role offers the opportunity to work at the cutting edge of cybersecurity, protecting critical assets in cloud environments. The ideal candidate will blend technical expertise in Google Cloud and Python with a passion for staying ahead of evolving security threats.
To apply or learn more about this exciting opportunity, please submit your resume and a brief cover letter outlining your relevant experience, particularly with Google Cloud and Python in security contexts. Employment Type: Contractor Salary: $ 145,000.00 Per Year