AI-Driven Cyber Defense Engineer - Incident Response Lead

Thomas Edwards Group; Dallas (TX); Vor Ort; USD 140.000 - 180.000; Vollzeit

Zusammenfassung

Thomas Edwards Group in Dallas is seeking a Cyber Defense Engineer to lead the end-to-end incident response lifecycle across on-premises and cloud environments, leveraging AI-assisted technologies, automation, and threat intelligence to rapidly detect, investigate, contain, and remediate security incidents.

The ideal candidate has 6+ years in cybersecurity operations, strong experience with the Microsoft security ecosystem, and familiarity with Azure, AWS, identity, endpoint, and email security;

Qualifikationen

• 6+ years of experience in Cybersecurity Operations or Incident Response.
• Experience investigating incidents across Azure, AWS, identity, endpoint, and email environments.
• Proficiency with Kusto Query Language (KQL).
• Certifications such as CISSP, CISM, CISA, or GIAC preferred.

Aufgaben

• Lead high-impact security incidents through the full incident response lifecycle.
• Investigate threats across endpoint, identity, email, network, and cloud environments.
• Use AI, automation, SIEM/XDR, and threat intelligence to improve detection and response.
• Perform threat hunting, log analysis, malware triage, and host forensics.
• Deliver incident reports, root cause analyses, and recommendations.

Ausbildung

Bachelor's degree or equivalent

6+ years cybersecurity operations / incident response

Strong analytical and incident leadership

Experience with AI-assisted security operations

Tools

Microsoft security ecosystem

Kusto Query Language (KQL)

Azure / AWS security

Jobbeschreibung

Thomas Edwards Group in Dallas is seeking a Cyber Defense Engineer to lead the end-to-end incident response lifecycle across on-premises and cloud environments, leveraging AI-assisted technologies, automation, and threat intelligence to rapidly detect, investigate, contain, and remediate security incidents.

The ideal candidate has 6+ years in cybersecurity operations, strong experience with the Microsoft security ecosystem, and familiarity with Azure, AWS, identity, endpoint, and email security;