Arrise
Skills: Python, AWS
What you will do
Incident Response
Lead investigations into complex security incidents, including containment, eradication, recovery, and root cause analysis. Coordinate cross-functional response activities, document lessons learned, and improve incident response procedures and playbooks.
Security Monitoring and Log Analysis
Monitor, triage, and investigate alerts from SIEM, EDR, cloud, and other security platforms. Correlate endpoint, network, identity, cloud, and application telemetry to identify security threats. Integrate new log sources and improve security visibility across enterprise environments. Use automation and scripting to streamline analysis and investigation processes.
Threat Hunting and Detection Engineering
Conduct proactive, hypothesis-driven threat hunting and translate findings into new detections, monitoring use cases, and response playbooks. Develop, test, maintain, and tune SIEM and EDR detections to improve accuracy and reduce alert fatigue. Identify detection gaps following incidents, threat intelligence reports, emerging attack trends, and validation exercises.
Cloud Security Monitoring
Investigate cloud security events across AWS, Azure, and GCP, including privilege escalation, exposed resources, anomalous activity, and identity-related threats. Develop cloud-focused detection use cases and incident response procedures.
Security Automation and Detection Validation
Identify automation opportunities that improve SOC efficiency and reduce Mean Time to Respond. Collaborate with Security Engineering, Infrastructure, and Red Team functions to validate detection coverage and response effectiveness.
Reporting, Mentorship and Training
Communicate investigation findings, security trends, and risks to technical and non-technical stakeholders. Produce clear technical and executive-level incident reports with actionable recommendations. Mentor junior analysts and contribute to training, workshops, tabletop exerci …truncated… rationalizing threat intelligence into…
Sign in to see the original posting
Browse more developer jobs on RoleBurst