What You’ll Do

• Lead and coordinate threat detection & incident response efforts , including maintaining and refining security playbooks and response processes .
• Develop and maintain detection engineering content across SIEM , XDR , and cloud-native logging systems (AWS CloudTrail , K8s , Wiz , PAM , etc.).
• Triage and manage alerts from cloud security posture management and monitoring platforms, ensuring efficient workflows and accurate escalations.
• Oversee and enhance logging pipelines, SIEM rules , and threat detection coverage to improve fidelity and reduce noise.
• Implement and optimize log management, cloud monitoring, and security automation to improve the efficiency of response.
• Build and maintain automation and orchestration workflows to streamline alert triage and incident response.
• Partner with engineering teams to integrate security visibi...