Senior Cybersecurity Engineer | Cyber Threat Intelligence & Response

Overview

Senior Cybersecurity Engineer in Cyber Threat Intelligence & Response, responsible for hands-on incident response across platforms and applications.

What you'll do

• Own incidents across detect, triage, investigate, contain, and eradicate until the threat is under control.
• Lead or step up on live incident response, coordinating with engineering, IT, and security teams.
• Investigate incidents by analyzing logs, endpoints, email, and network data to determine scope and remediation.
• Perform host and network forensics, malware triage, and email analysis to build a reliable attacker timeline.
• Hunt threats proactively using system logs, user behaviour, and threat intelligence to create detections and indicators of compromise.
• Build and automate incident response workflows and playbooks, and tune monitoring using MITRE ATT&CK.

What you'll need

• 3 to 6 years experience in security operations or incident response.
• Confidence managing incidents through the full incident-handling lifecycle.
• Strong triage and root cause analysis with ability to correlate events across log sources.
• Comfort reading logs (HTTP, SMTP, network) and working with Windows and Active Directory.
• Hands-on SIEM experience for investigation, hunting, and detection building.
• Experience with Microsoft Sentinel and KQL is preferred.

Details

• Location: Atlanta, GA, United States.
• Work mode: Remote.
• Employment includes on-call and out-of-hours coverage when needed.