Sr Security Operations Engineer, Detection and Response

Key Highlights

• Design, implement, test, and tune detections across endpoint, identity, cloud, SaaS, network, and application telemetry.
• Build detection-as-code practices using version control, testing, peer review, documentation, and repeatable deployment methods.
• Improve SIEM and security telemetry pipelines, including log ingestion, parsing, enrichment, correlation logic, alert routing, and case management workflows.
• Design and operate practical deception capabilities such as canary tokens, decoy accounts, honey assets, and other high-signal tripwires.
• Lead and support incident response investigations — perform severity triage, coordinate containment and remediation, and produce clear post-incident findings.