Sr Engineer II - SecOps Insider threat

Lead investigation and incident response for high-severity, complex security incidents across endpoint, identity, network, cloud, and SaaS environments.

Define and implement detection strategies aligned to MITRE ATT&CK; conduct threat hunts and develop SOC playbooks, runbooks, and process improvements.

Manage Tier 2 SOC operations, mentor junior analysts, and collaborate globally to maintain and enhance security operations and incident management capabilities.

8+ years of experience in security operations, incident response, detection engineering, or equivalent blue-team roles.

Bachelor’s degree in Information Systems, Cybersecurity, or related field, or equivalent experience.

Strong expertise in Windows, Linux, Active Directory, Entra ID, cloud security monitoring (AWS/Azure/GCP), Python or PowerShell scripting.

Advanced security certifications such as GCIA, GCIH, GCFA, GCDA, GNFA, GREM, OSCP, or Microsoft SC-200 are highly regarded.

Experienced in leading multi-stage incident investigations and root-cause analysis using raw logs and telemetry across diverse environments.

Proven ability to develop and improve SOC standards, processes, playbooks, and automation based on evidence and operational metrics.

Skilled mentor and collaborator capable of influencing engineering, IT, and business teams globally without direct authority.