Incident Response Engineer | Threat Analytics & Detection

United States Digital Space LLC; United States; Hybrid; USD 125,000 - 165,000; Full time

Job summary

United States Digital Space LLC is seeking a Security Incident Response Engineer to advance incident response capabilities with a focus on user and entity behavior analytics and endpoint hardening. You will gain deep familiarity with our systems and workflows to distinguish legitimate activity from threats.

Collaborate with security engineering and data science teams to build scalable detection pipelines using threat intelligence and telemetry, guiding incident response to reduce uncertainty and

Qualifications

• 3+ years analyzing large data sets for security problems.
• BS/MS in CS or related field, or equivalent experience.
• Expert Python and SQL; familiarity with other languages.
• Experience with log analysis, network security, and IR investigations.

Responsibilities

• Analyze and investigate threats on client devices.
• Develop detection model requirements and enhancements.
• Ingest data from diverse sources into threat pipelines.
• Streamline incident response tooling and processes.
• Collaborate with security engineering and data science teams to analyze events at scale.
• Provide actionable insights to detect and respond to anomalies.
• Serve as SME and main liaison for security analytics initiatives.
• Lead projects, mentor teammates, and uphold quality standards.

Skills

Python

SQL

Log analysis

Incident response

UEBA

Data analysis

Education

BS/MS Computer Science or related field

Tools

Databricks

Jupyter

Trino

Splunk/LogScale

PySpark

Job description

United States Digital Space LLC is seeking a Security Incident Response Engineer to advance incident response capabilities with a focus on user and entity behavior analytics and endpoint hardening. You will gain deep familiarity with our systems and workflows to distinguish legitimate activity from threats.

Collaborate with security engineering and data science teams to build scalable detection pipelines using threat intelligence and telemetry, guiding incident response to reduce uncertainty and