Security Threat Detection Engineer Consultant Job at Cloud Security Services, United States

MXV5L1ZWa05OeVFJc1hWZU1xMnk2NnVkYWc9PQ==
  • Cloud Security Services
  • United States

Job Description

About the Opportunity:          
Cloud Security Services, a New Era Company, is seeking a Security Threat Detection Engineer Consultant to support client’s Threat Management objectives to build, maintain and improve threat detections and alerting infrastructure and to ensure the right data collection and detections are in place to discover threats against infrastructure, data, employees, and customers. This is a 6-month remote opportunity.

Responsibilities: • Ideate, design, develop, test, monitor, and tune high-quality detections to ensure security analysts have the ability to respond to security threats 
• Write complete and well-documented alerting and detection strategies to ensure the security analysts and incident responders have the necessary context and runbooks to respond to detections
• Build, maintain, and improve custom detection and alerting solutions, or work with existing commercial tools to ensure they are tuned properly to meet detection coverage needs
• Act as a subject matter expert for security-relevant logs and data to assist Incident Response team during high-priority investigations
• Collaborate with Threat Intelligence team to ensure detections have a meaningful impact on improving security posture

Required Skills: • 1 – 3 years experience with hands-on experience with full-lifecycle detection engineering in support of a security operations team
• Experience as a Security Operations Analyst or Incident Responder
• Comfortability operating in Splunk or other common SIEM and SOAR solutions
• Technical depth in one or more of the following specialties: application security, cloud security, digital forensics, malware analysis, threat hunting, incident response or some combination thereof 
• Familiarity with SQL, relational databases, and data warehousing
• Basic Python (or other scripting language) experience in order to automate tasks within case management and CI/CD environment
• Experience with defining, collecting, and analyzing various metrics that exhibit the purpose and success of a maturing Detection Engineering program (i.e. MITRE ATT&CK coverage)
• Demonstrated knowledge of threat actor techniques, vulnerabilities, and exploits, and how those present themselves within logs and various endpoint/network artifacts
• Excellent communication and collaboration skills
• Ability to work with a high degree of autonomy
• Excellent analytical skills
• Collaborative team worker – both in person and virtually using WebEx or similar
• Excellent documentation skills; demonstrated proficiency in Microsoft Office including Word, Excel, and PowerPoint
• Ability to work as liaison between business and information security / information technology
• Flexibility to accommodate working across different time zones
• Excellent interpersonal communication skills with strong spoken and written English
• Business outcomes mindset
• Solid balance of strategic thinking with detail orientation
• Self-starter, ability to take initiative
• Project management and organizational skills with attention to detail


Preferred Skills:

• Relevant industry certifications 
• Experience working with and creating detections as Sigma rules 
• Formal software engineering, DevOps, or data science experience from prior jobs, trainings, or academia 
• Hands-on experience building tools and solutions within a public cloud environment, preferably AWS 
• Splunk engineering/administration experience 
• Experience with PCI-DSS, FedRAMP, and other compliance frameworks and their associated logging and detection requirements 



 
Required Education:

• Bachelor's degree (BA/BS) from four-year college or university; or equivalent training, education, and work experience
• Cybersecurity certifications such as CISSP, CISM, etc.

EEO Statement:          
Cloud Security Services is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, marital status, national origin, genetics, disability, age, or veteran status.

Job Tags

Work experience placement, Remote job,

Similar Jobs

Go See This World

Virtual Travel Specialist Job at Go See This World

 ...Travel Specialist with our dynamic and innovative team. We offer a unique business opportunity that allows you to work from the comfort of your home while earning competitive commissions. As a Virtual Travel Specialist you will play a crucial role in ensuring... 

Cornerstone Advocacy Service

Emergency Services Advocate-Part Time Job at Cornerstone Advocacy Service

 ...where individuals and families are safe and children thrive. We advocate, educate and lead the way to social change . Summary of...  ...in the training and mentoring of new staff, volunteers and/or students as assigned. Assures data entry is completed accurately in... 

Star Nursing, Inc.

RN's Needed Per Diem, Santa Rosa CA Job at Star Nursing, Inc.

 ...Location Santa Rosa / Petaluma CA Specialty: MS/Tele//ICU/L/D/NICU/Peds/ER Shift: 12 hours Length: Per Diem Pay Rate: $45 - $48/hr + OT REQUIREMENTS CA- RN - license in good standing 2 years of current acute care / hospital experience BLS/ACLS and/or... 

California Correctional Health Care Services

CAPTAIN, ADULT INSTITUTION Job at California Correctional Health Care Services

 ...new to CCHCS are required to submit to a background investigation process utilizing Live Scan Fingerprinting, and Tuberculosis (TB) testing prior to appointment followed by department annual TB testing/evaluation thereafter. When submitting supporting documents, PDF... 

MyKelly

R&D Assembler Job at MyKelly

 ...& Johnson's Irvine campus is rapidly expanding due to its high production demand and is immediately hiring qualified R&D Medical Device Assemblers. This is an excellent opportunity for career minded individuals looking to take the next step in their career. Full-time...