Senior CSIRT Engineer
New
V
VultrCloud Infrastructure
Remote - United StatesFull-TimeSenior
Salary110,000 - 130,000 USD per year
Apply NowOpens the employer's application page
Job Details
- Experience
- Minimum of 5 years experience in detection engineering, SIEM engineering, SOAR engineering, Security Operations, or a closely related role
- Required Skills
- PythonBash
Requirements
- Minimum of 5 years experience in detection engineering, SIEM engineering, SOAR engineering, Security Operations, or a closely related role
- Hands-on SIEM experience: rule authoring, parser development, log source integration, and platform administration
- Experience building SOAR workflows and automated response playbooks
- Experience with EDR platforms including policy configuration, telemetry analysis, and live response
- Proficiency in PowerShell, Bash, Python, and common Query Languages (FQL, KQL, EQL, LEQL, MQL)
- Proficiency in YARA, SIGMA, and CAPA rules
- Experience conducting security investigations, threat hunting, and incident response
- Solid understanding of attack techniques and detection logic mapped to MITRE ATT&CK
- Proficiency with Linux, MacOS, and Windows
Responsibilities
- Engineer, tune, and maintain detection rules and analytics in the SIEM and EDR platforms
- Administer SIEM platform health, parser configuration, log source onboarding, and data pipeline optimization
- Design and build SOAR playbooks and automated response workflows to streamline triage, enrichment, and containment
- Develop and maintain integrations between security tools (SIEM, EDR, SOAR, SEG, TIP, DLP, ticketing)
- Map detection coverage to MITRE ATT&CK to identify and close gaps
- Assist with investigation of security events, conducting threat hunts, and supporting incident response
View Full Description & ApplyYou'll be redirected to the employer's site
