Security Operations Architect: Detection & Incident Response

Digital Zone; United States; Teletrabalho; USD 120 000 - 160 000; Tempo integral

Resumo da oferta

Digital Zone is seeking its first Security Operations hire to own threat detection and incident response from start to finish, shaping how we log, alert, and respond. You will design, build, and operate detection across cloud, identity, endpoint and SaaS, and drive incident response playbooks with engineering and product security for measurable impact.

This role suits a hands-on security practitioner with 5+ years in operations or incident response, proficient in AWS logging sources like

Qualificações

• 5+ years in security operations, detection engineering or incident response.
• Hands-on experience building detections and runbooks.
• Experience with cloud AWS logging and detection in AWS services.

Responsabilidades

• Build and run core detection and response capabilities across cloud, identity, endpoint and SaaS.
• Design and operate security data pipelines bringing logs into SIEM or data lake.
• Own our security operations tooling and tune SIEM/EDR and automation to raise meaningful alerts.
• Write detections as code and map to MITRE ATT&CK with measurable coverage.
• Lead incident response, serve as incident commander and coordinate containment.

Conhecimentos

Detection engineering

Incident response

Threat hunting

SIEM

Security data pipeline

Automation

Python

SQL

Ferramentas

SIEM tooling

EDR

CloudTrail

GuardDuty

Descrição da oferta de emprego

Digital Zone is seeking its first Security Operations hire to own threat detection and incident response from start to finish, shaping how we log, alert, and respond. You will design, build, and operate detection across cloud, identity, endpoint and SaaS, and drive incident response playbooks with engineering and product security for measurable impact.

This role suits a hands-on security practitioner with 5+ years in operations or incident response, proficient in AWS logging sources like