Senior CSIRT Engineer
New
V
VultrCloud Infrastructure
Remote - United StatesFull-TimeSenior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- Minimum of 5 years experience in detection engineering, SIEM engineering, SOAR engineering, Security Operations, or a closely related role
- Required Skills
- PythonBash
Requirements
- Minimum of 5 years experience in detection engineering, SIEM engineering, SOAR engineering, Security Operations, or a closely related role.
- Hands-on SIEM experience at an engineering level: rule authoring, parser development, log source integration, platform administration.
- Experience building SOAR workflows and automated response playbooks.
- Experience with EDR platforms, including policy configuration, telemetry analysis, and live response.
- Demonstrated proficiency in PowerShell, Bash, Python, common Query Languages (FQL, KQL, EQL, LEQL, MQL, etc).
- Experience writing YARA, SIGMA, and CAPA rules.
- Experience conducting security investigations, threat hunting, and incident response.
- Solid understanding of attack techniques and detection logic mapped to MITRE ATT&CK.
- Proficiency with Linux, MacOS, and Windows.
Responsibilities
- Engineer, tune, and maintain detection rules and analytics in the SIEM and EDR platforms.
- Administer SIEM platform health, parser configuration, log source onboarding, and data pipeline optimization.
- Design and build SOAR playbooks and automated response workflows to streamline triage, enrichment, and containment.
- Develop and maintain integrations between security tools (SIEM, EDR, SOAR, SEG, TIP, DLP, ticketing).
- Map detection coverage to MITRE ATT&CK to identify and close gaps.
- Assist with investigation of security events, threat hunting, and incident response log analysis.
- Manage EDR platform coverage, sensor health, and policy configuration.
View Full Description & ApplyYou'll be redirected to the employer's site
