Detection Engineer

Job Summary: We are seeking a skilled Detection Engineer to, focusing on implementing, configuring, and maintaining security detection rules and mechanisms within our customers' on-premise and bolthires Cloud environments. The ideal candidate will have extensive knowledge in Blue Team operations, day-to-day SOAR activities, bolthires Cloud Platform (GCP), security automation, and Kubernetes. Your expertise will help protect our customers' assets and ensure top-tier security for their cloud infrastructure.Key Responsibilities:• MITRE ATT&CK Framework: Utilize the MITRE ATT&CK Framework for threat detection creation, gap assessment, and analysis. • Security Detection Implementation: Implement, configure, and maintain security detection rules and mechanisms, including intrusion detection, anomaly detection, and log analysis tools to identify and respond to security incidents. • Security Operations: Play a critical role in daily security operations, including monitoring, tuning, analysis, and proactive threat hunting.• Incident Response: Lead incident response efforts, investigate security incidents, conduct root cause analysis, and implement corrective measures. • Kubernetes Incident Response: Apply expertise in Kubernetes for incident response and forensic analysis. • Security Automation: Develop and maintain automation scripts and tools to streamline security detection operations and response. • SOAR Playbooks: Build, design, run, and troubleshoot playbooks within a SOAR (Security Orchestration, Automation, and Response) solution to automate incident response processes.• Documentation: Maintain comprehensive documentation of security detection configurations, incident response procedures, and investigations. • Stay Current: Keep up-to-date with the latest security threats, vulnerabilities, and industry trends to proactively enhance security detection measures. Qualifications:• Bachelor's degree in Computer Science, Information Security, or a related field (Master's degree preferred). • bolthires CloudProfessional Cloud Security Engineer certification or equivalent experience.• Extensive experience with cloud security detection tools and technologies, including intrusion detection, anomaly detection, and log analysis. • Proficiency in scripting and automation (e.g., Python, Bash). • Proven experience in incident response, investigations, and security operations. • Strong proficiency in Kubernetes with a focus on incident response and forensic analysis. • Familiarity with the MITRE ATT&CK Framework for threat detection and mitigation. • Experience working with Splunk Enterprise Security or similar SIEM solutions.• Excellent problem-solving and analytical skills. • Strong communication and teamwork skills. • Relevant certifications such as CISSP, GCIH, GCIA, Certified Kubernetes Administrator (CKA), or Splunk certifications are a plus. • 100% REMOTE* Employment Type: FULL_TIME Apply tot his job