Security Operations Engineer: Threat Hunter & IR Lead

eBSI Export Academy; United States; A distancia; USD 122.000 - 171.000; Jornada completa

Descripción de la vacante

Revizto is seeking a Security Operations Engineer to join our Information Security team. You will identify, investigate, and respond to security threats across cloud, endpoints, and SaaS environments, owning incidents through their lifecycle and improving threat detection capabilities.

You will work closely with Engineering, DevOps, and IT to strengthen our security posture and reduce detection and response times.

Formación

• At least 3 years in a SOC, incident response, or security detection role.
• Experience with SIEM (prefer Microsoft Sentinel) and EDR (prefer CrowdStrike Falcon).
• Ability to write, analyze, optimize, and tune security detection queries using KQL or similar languages.
• Solid understanding of MITRE ATT&CK, ISO 27001, NIST, CIS, SOC 2, and cloud security (AWS/Azure).
• End-to-end incident response experience.

Responsabilidades

• Monitor, triage, and investigate security alerts across cloud, endpoint, and SaaS environments.
• Lead and coordinate security incident response activities, containment, eradication, recovery, and post-incident reports.
• Develop and refine security detection rules to improve accuracy and reduce false positives.
• Conduct proactive threat-hunting across cloud, endpoint, and identity telemetry.
• Analyze security logs from AWS, Azure/Entra ID, Kubernetes, endpoints, and SaaS apps.
• Investigate cloud security findings and coordinate remediation with system owners.
• Maintain health and onboarding of security log sources to improve monitoring.
• Create and update incident response runbooks and escalation procedures.

Conocimientos

SOC experience

Incident response

Threat detection

KQL

Cloud security

English proficiency

Microsoft Sentinel

CrowdStrike Falcon

Herramientas

Microsoft Sentinel

CrowdStrike Falcon

Descripción del empleo

Revizto is seeking a Security Operations Engineer to join our Information Security team. You will identify, investigate, and respond to security threats across cloud, endpoints, and SaaS environments, owning incidents through their lifecycle and improving threat detection capabilities.

You will work closely with Engineering, DevOps, and IT to strengthen our security posture and reduce detection and response times.