Threat & Security Incident Response Specialist

Job Title: Threat & Security Incident Response Specialist
Location: Remote
Duration; Full Time
Basic Purpose:
Primarily focused on security operations, threat intelligence and incident response. Will respond to security alerts, perform threat hunting and escalate critical alerts. Will help enhance and optimize the threat intelligence platform and incident response processes. Will also help with tuning and optimization of security events and alerts.
Experience/Skills:
Must have proficiencies:
Experience & advanced knowledge & understanding of threat TTP’s (tactics, techniques & processes) and MITRE framework
Experience & advanced knowledge of threat hunting and incident response processes (identification of critical vs informational alerts)
Experience in building detection use cases
Experience with Splunk
Understanding of User Authentication, Endpoint and Network / Firewall security events and baselining
Desirable proficiencies:
Carbon Black Endpoint Security
Microsoft Defender Suite
Email security tools like Avanan or Proofpoint
Qualys
MISP (Malware Intelligence Sharing Platform)
Competencies:
Must be security minded and well versed in security principles and best practices
Professional security certifications are a plus (CISSP, GIAC, or relevant product certs)
Ability to work effectively with limited direction and guidance
Strong analytical, organizational and time management skills
Ability to communicate clearly and effectively

Work arrangement
Yes