Senior Cyber Defense Ops Lead | IR, SIEM & Automation

VulnU; Cary (NC); In loco; USD 120.000 - 180.000; Tempo pieno

Vantaggi offerti da questo lavoro

Unlimited PTO

Retirement match

Health premiums covered

Descrizione del lavoro

Epic Games in Cary, NC seeks a Senior Cyber Defense Operations Analyst to lead investigations and incident response across cloud, on-premises, and production environments. You will drive detection improvements, automate repetitive tasks, and coordinate with engineering, legal, and privacy teams to mitigate threats.

You will develop playbooks, mentor analysts, and ensure rigorous incident documentation while leveraging AI-assisted workflows to scale SOC operations.

Competenze

• 5+ years of experience in security operations, incident response, or threat detection, including leading investigations end-to-end.
• Hands-on experience with SIEM and EDR platforms (e.g., Splunk, Google SecOps, CrowdStrike NGSIEM) and writing effective queries and detections.
• Strong understanding of attacker tradecraft and frameworks such as MITRE ATT&CK.
• Experience investigating in cloud environments (AWS and/or GCP), SaaS, and identity platforms.
• Scripting or programming skills (Python or similar) and a drive to automate repetitive work; SOAR experience is a plus.

Mansioni

• Lead the triage, investigation, and response for security alerts and incidents across cloud, corporate, endpoint, identity, and production environments.
• Act as an escalation point and incident lead, coordinating with engineering, legal, privacy, and business partners through containment, remediation, and post-incident review.
• Drive the detection lifecycle management, developing, tuning, and retiring detection logic to maximize signal-to-noise ratio and close emerging threat gaps.
• Identify recurring analyst work and partner with security engineering to automate it, including AI-agent workflows with clear validation and human review where it counts.
• Turn threat intelligence and emerging vulnerabilities into rapid exposure assessments and actionable response across the company.
• Develop and maintain playbooks, runbooks, and operational metrics that make the SOC faster, more consistent, and easier to scale.
• Set and elevate standards for investigation quality and case documentation, actively coaching analysts and holding managed-service partners accountable to rigorous SLAs and analytical depth.

Conoscenze

SOC operations

Incident response

SIEM/EDR

Cloud security

Python scripting

MITRE ATT&CK

SOAR

Strumenti

Splunk

Google SecOps

CrowdStrike NGSIEM

Descrizione del lavoro

Epic Games in Cary, NC seeks a Senior Cyber Defense Operations Analyst to lead investigations and incident response across cloud, on-premises, and production environments. You will drive detection improvements, automate repetitive tasks, and coordinate with engineering, legal, and privacy teams to mitigate threats.

You will develop playbooks, mentor analysts, and ensure rigorous incident documentation while leveraging AI-assisted workflows to scale SOC operations.