Sr. Cybersecurity Engineer

Experience securing AWS/Azure environments Familiarity with: o CI/CD security (GitHub, GitLab, Jenkins) o IaC security (Terraform, CloudFormation) o Policy-as-code (OPA, Checkov) Threat Detection & Incident Response Lead end-to-end investigation of complex security incidents (malware, phishing, lateral movement, cloud compromise) Perform advanced threat hunting using SIEM, EDR, and cloud telemetry Conduct deep forensic analysis (endpoint, network, logs, email headers) Detection Engineering & SOC Optimization Design and implement high-fidelity detection rules and use cases Develop and enhance SOC playbooks aligned with MITRE ATT&CK Security Tooling & Platforms Lead implementation and optimization of: o SIEM: Microsoft Sentinel / Splunk / QRadar o EDR/XDR: Defender, CrowdStrike, SentinelOne o Email Security: Proofpoint, Mimecast, Defender for Office o WAF & Network Security tools Manage integrations across multi-vendor security stack Automation & SOAR Develop automation playbooks (SOAR) for triage, enrichment, and response Cloud Security & DevSecOps Monitor and secure cloud environments (AWS/Azure) Implement logging and detection using: o CloudTrail, VPC Flow Logs, Defender, Sentinel Drive DevSecOps practices (SAST, DAST, IaC scanning, policy-as-code) Risk, Compliance & Governance Perform vulnerability assessments and risk analysis Ensure alignment with frameworks: o NIST, CIS Benchmarks, GDPR, PCI-DSS

8 12+ years in cybersecurity / SOC / threat detection roles Experience in L2/L3 SOC or Security Operations leadership. Technical Skills: Strong hands-on expertise in: o SIEM: Sentinel / Splunk / QRadar o EDR/XDR tools o Threat hunting & incident response Deep understanding of: o MITRE ATT&CK o Threat vectors, malware behavior, attack techniques Experience with: o Log analysis, detection engineering, and correlation rules o Security automation (SOAR), o Email security platforms (Proofpoint, Mimecast) o WAF/CDN (Akamai, Cloudflare) o Threat intelligence platforms Certifications (Preferred) CISM / CISSP CEH / CHFI Vendor certifications (Microsoft Sentinel, QRadar, Splunk)