Senior SOC Incident Responder & Threat Hunter

OneMain Financial; Baltimore (MD); Vor Ort; USD 120.000 - 190.000; Vollzeit

Zusammenfassung

OneMain Financial is seeking a senior cybersecurity investigator to lead advanced incident responses across on-prem and cloud environments. You will drive detection engineering, threat hunting, and post-incident reviews while mentoring junior analysts.

The role requires deep expertise with SIEM/EDR/XDR tools, cloud security, and a track record of handling complex enterprise incidents in a regulated setting.

Qualifikationen

• Deep expertise in SIEM, SOAR, EDR/XDR, NDR, IDS/IPS, WAF, and cloud security technologies.
• Experience with Elastic Security, CrowdStrike Falcon, and Defender suites.
• Minimum 8 years in cybersecurity with leadership in complex investigations.

Aufgaben

• Lead advanced investigations across ransomware, APTs, zero-day exploits, insider threats, credential theft, and data exfiltration.
• Perform full incident response lifecycle including detection, containment, eradication and recovery.
• Develop detections and SIEM rules; conduct threat hunting using MITRE ATT&CK and threat intel.
• Mentor Tier 1/2 analysts and support management with technical reports and timelines.

Kenntnisse

SIEM

EDR/XDR

Threat hunting

MITRE ATT&CK

PowerShell

Python

KQL

Elastic Security

CrowdStrike Falcon

Ausbildung

Bachelor's degree in Cybersecurity/CS/IT

GCFA/GCFE/GCIH/GCIA or equivalent

Security certifications (AWS/CISSP etc)

Tools

Elastic Security (ELK)

Microsoft Defender XDR/Defender Suite

AD/AD CS

Azure/AWS cloud security

Jobbeschreibung

OneMain Financial is seeking a senior cybersecurity investigator to lead advanced incident responses across on-prem and cloud environments. You will drive detection engineering, threat hunting, and post-incident reviews while mentoring junior analysts.

The role requires deep expertise with SIEM/EDR/XDR tools, cloud security, and a track record of handling complex enterprise incidents in a regulated setting.