Senior Cyber Defense Ops Lead — IR & Automation

Wwshemi; Cary (NC); In loco; USD 120.000 - 180.000; Tempo pieno

Vantaggi offerti da questo lavoro

100% premiums covered for employee and

Unlimited PTO

Sabbatical after 7 years of employment

401k with competitive match

Mental health program with Modern Well

Descrizione del lavoro

Epic Games' Security Operations Center is seeking a Senior CDO Analyst to lead investigations and incident response, converting repeatable analyses into automated, AI-assisted workflows so the team focuses on the threats that matter.

You will triage alerts across cloud, on‑premise, endpoint, identity, and production environments, coordinate with engineering, legal, and partners, and develop playbooks to speed response and improve detection.

Competenze

• 5+ years of experience in security operations, incident response, or threat detection, including leading investigations end-to-end.
• Deep hands-on experience with SIEM and EDR platforms and writing effective queries and detections.
• Strong understanding of attacker tradecraft and frameworks such as MITRE ATT&CK, with the ability to reconstruct activity from logs and telemetry.
• Experience investigating in cloud environments (AWS and/or GCP), SaaS, and identity platforms.

Mansioni

• Lead triage, investigation, and response for security alerts and incidents across cloud, corporate, endpoint, identity, and production environments.
• Act as escalation point and incident lead, coordinating with engineering, legal, privacy, and business partners through containment, remediation, and post-incident review.
• Drive detection lifecycle management, developing, tuning, and retiring detection logic to maximize signal-to-noise ratio and close emerging threat gaps.
• Identify recurring analyst work and partner with security engineering to automate it, including AI-agent workflows with clear validation and human review where it counts.
• Turn threat intelligence and emerging vulnerabilities into rapid exposure assessments and actionable response across the company.
• Develop and maintain playbooks, runbooks, and operational metrics that make the SOC faster, more consistent, and easier to scale.
• Set and elevate standards for investigation quality and case documentation, coaching analysts and ensuring SLAs.

Conoscenze

SIEM

EDR

Cloud security

Python scripting

SOAR

Threat intelligence

Investigation & incident response

Clear communication

Automation design

Strumenti

Splunk

Google SecOps

CrowdStrike NGSIEM

Descrizione del lavoro

Epic Games' Security Operations Center is seeking a Senior CDO Analyst to lead investigations and incident response, converting repeatable analyses into automated, AI-assisted workflows so the team focuses on the threats that matter.

You will triage alerts across cloud, on‑premise, endpoint, identity, and production environments, coordinate with engineering, legal, and partners, and develop playbooks to speed response and improve detection.