Own and operate our SIEM Design detection use cases, onboard log sources, tune out noise, and triage alerts.
Run security monitoring Own continuous detection coverage and the escalation path from detection into incident response.
Lead incident response Own containment, eradication and recovery for security incidents, working hand in hand with engineering. Escalate promptly to the appointed CISO / security leadership where required.
Run vulnerability management Own scanning, triage, remediation tracking and verification day to day, and support the annual independent penetration test.
Operate threat intelligence Track relevant feeds, maintain indicators of compromise, and keep detections current.
Own security tooling Configure and maintain our endpoint and network security tooling (EDR, firewalls, network monitoring), in coordination with engineering.
Harden our environment Help set and maintain baseline security-configuration and access-control standards, and drive remediation with the teams that own the systems.
Support vendor security Contribute the technical side of security due diligence on third parties and cloud providers.
Own on-call for security incidents Hold or share coverage for security incidents outside business hours.

(Senior) IT Security Engineer

We are looking forward to hearing from you!