Specialist, Security Engineering & Operations

Crypto.com; United States; Remote; USD 60,000 - 80,000; Full time

Job summary

An innovative firm is seeking an intermediate-level security specialist to enhance its cybersecurity capabilities. This role involves engaging in threat monitoring, incident response, and security engineering, with a strong focus on AI-driven automation. The ideal candidate will have hands-on experience in security operations and a passion for building robust security solutions. Join a dynamic team that values cross-functional leadership and offers opportunities for mentorship and professional growth. If you are self-motivated and detail-oriented, this is the perfect opportunity for you to make a significant impact in the cybersecurity landscape.

Qualifications

• 5-7 Jahre Erfahrung in der Informationssicherheit, insbesondere in Sicherheitsoperationen.
• Erfahrung in der Anwendung von AI/ML in Cybersecurity-Anwendungsfällen.

Responsibilities

• Überwachung und Untersuchung von Sicherheitsvorfällen, einschließlich Incident Triage und Root Cause Analysis.
• Leitung von Sicherheitsprojekten zur Verbesserung der Endpoint Security und Bedrohungserkennung.

Skills

Information Security

Security Operations

Incident Response

Digital Forensics

Endpoint Security

Cloud Security

AI/ML in Cybersecurity

Scripting Languages

Tools

SIEM

EPP/EDR/XDR

SOAR

Digital Forensics Tools

Cloud Security Tools

Job description

We are looking for an intermediate level security specialist to join our Global Cybersecurity Services Team. As part of our modern cybersecurity operating model, the role will be engaged in enhancing our security technology stack, building AI driven security automation workflows and contributing to security operations.

We are building a modern, multi-cloud, intelligence driven security operations capability that will heavily involve AI and automation; and will require engineering and operational skills at all levels.

Responsibilities

• Threat Monitoring Investigations - deep dive into Tier 1 & Tier 2 security operations escalations, performing incident triage and root cause analysis. Proficient in performing investigations using open source and proprietary tools, including but not limited to - EPP/EDR/XDR software, Digital Forensics tools/software, SIEM platforms, etc.
• Security Engineering - Build, maintain and enhance our security operations technology stack, which includes next generation SIEM and SOAR solutions. Familiar with security logging and detection engineering practices, manage the detection use case life cycle. Relentlessly automate and creatively incorporate AI into workflows.
• Incident Response - Proficient in end-to-end Incident Response. Able to take the lead and provide guidance during investigations and incidents to pivot the investigation, drive containment, mitigation and other security outcomes.
• Security Projects - Lead projects and initiatives that may involve - Endpoint Security enhancements, Threat Hunting, Compromise Assessments, Network/Endpoint security reviews, etc.
• Leadership - Be comfortable with cross-functional leadership and stakeholder management. Be willing to mentor and contribute to the growth and capability of the team.

Requirements

• 5-7 years of experience in Information Security, with technical hands-on experience in Security Operations, Security Engineering, Digital Forensics, Incident Response, Endpoint Security or Cloud Security.
• Working Experience with SIEM, EPP/EDR/XDR, SOAR, Cloud Security (CSPM, Container Security, etc), Digital Forensics software & tools.
• Working experience with Cloud environments like AWS, Azure and GCP.
• Experience in applying AI/ML in cybersecurity use cases.
• Experience in using scripting languages to automate tasks and manipulate data or programming experience.
• Highly self-motivated, attention to detail and outcome driven.
• Proficiency in verbal and written English.
• On-call is required.