incident response engineer

Autodesk

<div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div>Job Requisition ID #</div></div></div></div></div></div></div></div></div></div></div></div></div></div></div><div></div>
26WD95928<div></div><div>
Position Overview</div><div>
As a Principal Security Analyst, you will be responsible for conducting deep technical investigations and advanced threat analysis. In this critical role, you will utilize your exceptional Splunk skills to integrate and analyze data from multiple platforms to identify and remediate security incidents. Drawing on extensive field experience, you will build data pipelines from services in the cloud and on prem to our Splunk instance. You will also contribute to proactive threat hunting, develop effective incident response strategies, and mentor less experienced team members.</div><div></div><div>
Responsibilities</div><ul><li><div>
Advanced Incident Analysis: Conduct detailed investigations on high-complexity incidents, correlating data across diverse sources using Splunk to pinpoint IOCs and determine root causes</div></li><li><div>
Collaboration: Work directly with the Incident Response Manager and cross-functional teams to coordinate incident mitigation efforts and continuously refine response protocols</div></li><li><div>
Process Improvement: Develop and maintain technical playbooks, enhance detection capabilities, and contribute to the evolution of Autodesk&rsquo;s incident response strategy</div></li><li><div>
Mentorship: Provide technical guidance and mentorship to junior analysts, fostering an environment of continuous learning and improvement</div></li><li><div>
Cloud Environment: Operate seamlessly within a cloud agnostic framework, with exposure to Azure, AWS, and GCP infrastructures</div></li></ul><div></div><div>
Minimum Qualifications</div><ul><li><div>
Experience: 5+ years of hands-on experience in incident response or security operations, with a strong background in complex security investigations</div></li><li><div>
Technical Skills: Exceptional proficiency with Splunk; capable of writing and optimizing multi-source queries, and incident dashboards to detect or display advanced threats</div></li><li><div>
Field Experience: Demonstrated ability to independently conduct sophisticated threat analyses and forensic investigations</div></li><li><div>
Soft Skills: Strong analytical, problem-solving, and communication skills; proven ability to mentor peers</div></li><li><div>
Cloud Agnostic: Experience or familiarity with managing security operations in cloud environments including Azure, AWS, and GCP</div></li></ul><div></div><div><div><div><div><div><div><div><div>
Learn More</div></div></div></div></div></div></div></div><div></div><div>
About Autodesk</div><div>
Welcome to Autodesk! Amazing things are created every day with our software &ndash; from the greenest buildings and cleanest cars to the smartest factories and biggest hit movies. We help innovators turn their ideas into reality, transforming not only how things are made, but what can be made.</div><div></div><div>
We take great pride in our culture here at Autodesk &ndash; it&rsquo;s at the core of everything we do. Our culture guides the way we work and treat each other, informs how we connect with customers and partners, and defines how we show up in the world.</div><div></div><div>
When you&rsquo;re an Autodesker, you can do meaningful work that helps build a better world designed and made for all. Ready to shape the world and your future? Join us!</div><div></div><div>
Benefits</div><div>
From health and financial benefits to time away and everyday wellness, we give Autodeskers the best, so they can do their best work. Learn more about our benefits in the U.S. by visiting <div>https://benefits.autodesk.com/</div></div><div></div><div><div><div><div><div><div><div><div>
Salary transparency</div></div></div></div></div></div></div></div>
Salary is one part of Autodesk&rsquo;s competitive compensation package. For U.S.-based roles, we expect a starting base salary between $134,000 and $239,580. Offers are based on the candidate&rsquo;s experience and geographic location, and may exceed this range. In addition to base salaries, our compensation package may include annual cash bonuses, commissions for sales roles, stock grants, and a comprehensive benefits package.<div></div><div>
Equal Employment Opportunity</div><div>
At Autodesk, we're building a diverse workplace and an inclusive culture to give more people the chance to imagine, design, and make a better world. Autodesk is proud to be an equal opportunity employer and considers all qualified applicants for employment without regard to race, color, religion, age, sex, sexual orientation, gender, gender identity, national origin, disability, veteran status or any other legally protected characteristic. We also consider for employment all qualified applicants regardless of criminal histories, consistent with applicable law.</div><div></div><div>
Diversity &amp; Belonging</div><div>
We take pride in cultivating a culture of belonging where everyone can thrive. Learn more here: <div>https://www.autodesk.com/company/diversity-and-belonging</div></div><div></div><div>
Are you an existing contractor or consultant with Autodesk?</div><div>
Please search for open jobs and apply internally (not on this external site).</div></div>

Principal Incident Response Engineer, Remote

Walmart

<div><h2 class="jobSectionHeader"><b>Position Summary...</b></h2><p></p><h2 class="jobSectionHeader"><b>
What you'll do...</b></h2><b>
Role summary:</b>
<br>
As an Incident Response professional on Walmart&rsquo;s Global CSIRT, you will lead the investigation, containment, eradication, and recovery of cybersecurity incidents across our enterprise environment. You will manage high-impact security events end-to-end, coordinate cross-functional response efforts, preserve forensic evidence, and drive timely remediation to reduce business risk. This role operates in a 24/7/365 environment and requires decisive action under pressure. Your focus is hands-on response, technical analysis, and restoring operations quickly and securely &mdash; serving as the enterprise&rsquo;s last line of defense.
<br>
<b>About the team:</b>
<br>
Walmart&rsquo;s Global CSIRT safeguards one of the largest retail ecosystems worldwide, providing continuous protection across multiple countries and platforms. The team delivers 24/7/365 incident response, investigating and mitigating cyber threats to minimize business impact and maintain customer trust. Collaborating closely with engineering, infrastructure, legal, compliance, and leadership, the team ensures effective response and ongoing security improvements. Beyond incident management, the team enhances Walmart&rsquo;s security posture through intelligence-driven defense and lessons learned. This role offers the opportunity to contribute to a global organization&rsquo;s cyber defense with precision and strong cross-functional coordination.
<br>
<b>What you'll do:</b>
<br>
<ul><li>Lead end-to-end response for cybersecurity incidents across the enterprise</li><li>
Perform hands-on investigation, containment, eradication, and recovery actions</li><li>
Coordinate cross-functional response efforts with technical and business stakeholders</li><li>
Conduct root cause analysis and document findings</li><li>
Preserve and analyze forensic evidence to support investigations</li><li>
Drive remediation efforts to reduce risk and prevent recurrence</li><li>
Contribute to incident procedures and continuous response improvement</li></ul>
<br>
<b>What you'll bring:</b>
<br>
<ul><li>Proven experience in cybersecurity incident response or digital forensics</li><li>
Strong understanding of enterprise infrastructure, cloud, and network security</li><li>
Ability to analyze complex security events and drive containment and remediation</li><li>
Experience working in high-pressure, 24/7 operational environments</li><li>
Clear communication skills and ability to brief technical and non-technical stakeholders</li><li>
Collaborative mindset with cross-functional partners across global teams</li><li>
Continuous learning mentality and passion for defending against evolving threats</li></ul>
At Walmart, we offer competitive pay as well as performance-based bonus awards and other great benefits for a happier mind, body, and wallet. Health benefits include medical, vision and dental coverage. Financial benefits include 401(k), stock purchase and company-paid life insurance. Paid time off benefits include PTO (including sick leave), parental leave, family care leave, bereavement, jury duty, and voting. Other benefits include short-term and long-term disability, company discounts, Military Leave Pay, adoption and surrogacy expense reimbursement, and more. You will also receive PTO and/or PPTO that can be used for vacation, sick leave, holidays, or other purposes. The amount you receive depends on your job classification and length of employment. It will meet or exceed the requirements of paid sick leave laws, where applicable. For information about PTO, see https://one.walmart.com/notices. Live Better U is a Walmart-paid education benefit program for full-time and part-time associates in Walmart and Sam's Club facilities. Programs range from high school completion to bachelor's degrees, including English Language Learning and short-form certificates. Tuition, books, and fees are completely paid for by Walmart.
<br>
Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to a specific plan or program terms.
<br>
For information about benefits and eligibility, see One.Walmart.
<br>
The annual salary range for this position is $90,000.00 - $180,000.00 Additional compensation includes annual or quarterly performance bonuses. Additional compensation for certain positions may also include :
<br>
<ul><li>Stock</li></ul><p>
ㅤ</p><p></p><p>
ㅤ</p><p>
ㅤ</p><p>
ㅤ</p><p></p><p>
&lrm;</p><h2 class="jobSectionHeader"><b>
Minimum Qualifications...</b></h2><p><i>
Outlined below are the required minimum qualifications for this position. If none are listed, there are no minimum qualifications.
</i></p><p></p>Option 1: Bachelor's degree in computer science, information technology, engineering, information systems, cybersecurity, or related area and 3 years&rsquo; experience in incident response or related area at a technology, retail, or data-driven company.Option 2: 5 years&rsquo; experience in incident response or related area at a technology, retail, or data-driven company.<p></p><h2 class="jobSectionHeader"><b>
Preferred Qualifications...</b></h2><p><i>
Outlined below are the optional preferred qualifications for this position. If none are listed, there are no preferred qualifications.</i></p><p></p>
Certifications in Security+, Network+, GISF, GSEC, CISSP, CCSP, or GCIH, Master&rsquo;s degree in Computer Science, Information Technology, Engineering, Information Systems, Cybersecurity, or related area and 1 Years' Exposure of leading/ working on Information Security / Cyber Security Projects, We value candidates with a background in creating inclusive digital experiences, demonstrating knowledge in implementing Web Content Accessibility Guidelines (WCAG) 2.2 AA standards, assistive technologies, and integrating digital accessibility seamlessly. The ideal candidate would have knowledge of accessibility best practices and join us as we continue to create accessible products and services following Walmart&rsquo;s accessibility standards and guidelines for supporting an inclusive culture.<p></p>
CISSP - Certified Information Systems Security Professional - Certification<h2 class="jobSectionHeader"><b>
Primary Location...</b></h2><p></p>
805 Se Moberly Ln, Bentonville, AR 72712, United States of America<p></p>
Walmart and its subsidiaries are committed to maintaining a drug-free workplace and has a no tolerance policy regarding the use of illegal drugs and alcohol on the job. This policy applies to all employees and aims to create a safe and productive work environment.</div>

(USA) Senior Incident Response Engineer

Openkyber

<div><p><b>Job Details :</b></p>
<ul><li><b>Job Title:</b> Incident Response, Logging &amp; SIEM Engineer</li>
<li><b>Location:</b> Phoenix, AZ (Hybrid 3 Days a Week Onsite)</li>
<li><b>Duration:</b> 12 Months Contract</li>
</ul><p><b>Description :</b> We're looking for an Incident Response (IR) specialist with deep expertise in logging, telemetry, and SIEM engineering who can detect, investigate, and eradicate threats across cloud and endpoint environments. You will own end-to-end detection engineering and response workflows - building high-fidelity detections, orchestrating data flows, tuning SIEM pipelines, leading incident investigations, and strengthening controls across AWS, Google Cloud Platform, and endpoint security platforms.</p>
<p><b>Key Responsibilities :</b></p>
<ul><li><b>Incident Response</b> Lead triage, investigation, containment, eradication, and recovery for security incidents across cloud, endpoint, identity, and network layers. Perform root cause analysis, draft incident timelines, and produce clear post-incident reports with corrective and preventive action plans (CAPA). Coordinate with IT, Cloud, Networking, Legal, and Compliance to drive rapid, well-documented response. Develop and run tabletop exercises, purple-team drills, and lessons-learned cycles; convert outcomes into detections and control hardening.</li>
<li><b>Logging, Telemetry &amp; SIEM Engineering</b> Design and maintain scalable logging pipelines and data flows (collection, normalization, enrichment, retention) for on-prem, AWS, and Google Cloud Platform sources. Engineer SIEM use cases, correlation rules, threat hunting queries, dashboards, and alerts with a strong focus on precision and low false-positive rates. Integrate endpoint, identity, network, and cloud telemetry (e.g., EDR/EPP, DNS, proxy, firewall, VPC Flow Logs, CloudTrail, Google Cloud Platform Audit Logs, Auth logs). Continuously tune parsers, field mappings (e.g., ECS/OCSF), and normalization to improve signal quality and response time.</li>
<li><b>Threat Detection &amp; Malware Analysis</b> Conduct static and dynamic malware analysis (strings, headers, PE/ELF artifacts, sandbox detonation, behavior profiling, memory forensics). Implement IOC/IOA-driven detections and behavior-based analytics; maintain threat intel feeds and detection pipelines. Hunt for adversary behaviors mapped to MITRE ATT&amp;CK; document hypotheses, methods, and outcomes.</li>
<li><b>Cloud Security (AWS &amp; Google Cloud Platform)</b> Build and maintain detections for cloud control plane and data plane misuse (privilege escalation, data exfiltration, anomalous IAM, persistence). Validate logging coverage and guardrails (e.g., AWS CloudTrail, GuardDuty, VPC Flow Logs; Google Cloud Platform Audit Logs, VPC Flow, Security Command Center). Partner with cloud engineering to harden identity, networking, storage, and workload protections.</li>
<li><b>Endpoint Protection &amp; Troubleshooting</b> Administer and tune EPP/EDR policies, response playbooks (isolation, kill process, quarantine, registry/network artifact cleanup). Troubleshoot logging gaps, sensor health, agent conflicts, and performance issues across Windows, macOS, and Linux.</li>
<li><b>Governance, Risk &amp; Compliance</b> Apply core information security principles (least privilege, defense-in-depth, segmentation, secure defaults, logging by design). Support regulatory and customer audits (e.g., SOC 2, ISO 27001, HIPAA, PCI DSS) by providing evidence and IR documentation.</li>
</ul><p><b>Required Qualifications :</b> Experience: 3 7+ years in Incident Response, SOC, or Threat Detection/Response with hands-on SIEM engineering. Cloud: Practical security operations in AWS and Google Cloud Platform (logging coverage, detections, IAM, network controls, data protection). Malware Analysis: Proficiency with both static (e.g., strings, disassembly triage) and dynamic (sandboxing/behavioral) techniques. Networking &amp; Data Flows: Strong grasp of TCP/IP, DNS, HTTP(S), proxying, TLS, common lateral movement patterns; able to diagram and optimize telemetry flows. SIEM: Engineering and operating at least one enterprise SIEM (e.g., Splunk, Elastic, Microsoft Sentinel, Chronicle) with query/correlation rule creation. Endpoint Protection: Experience with EPP/EDR tools (e.g., CrowdStrike, Microsoft Defender for Endpoint, SentinelOne, Carbon Black) and response workflows. Incident Handling: Proven ability to lead incidents, communicate clearly under pressure, and produce executive-ready reports. Scripting: Proficiency in at least one: Python, PowerShell, or Bash for automation and enrichment. Information Security Principles: Demonstrated application of CIA triad, zero trust concepts, hardening, and secure operations practices.</p>
<p><b>Preferred Qualifications :</b> Certifications: GCIH, GCIA, GCFA, GNFA, GCTI, GMON, OSCP, AWS Security Specialty, Google Professional Cloud Security Engineer, CISSP. Forensics: Memory/disk triage (Volatility, KAPE), PCAP analysis (Wireshark), YARA/Sigma rule authoring. Threat Intel &amp; CTI: Consuming and operationalizing TI (MISP, TAXII/STIX), enriching detections with context. Automation: SOAR playbook design (e.g., Cortex XSOAR, Swimlane, Splunk SOAR, Sentinel automation). Data Engineering: Familiarity with schema mapping (ECS/OCSF), parsing (Grok/regex), and streaming (Kafka/Kinesis/Pub/Sub).</p>
<p><b>For applications and inquiries, contact:</b> hirings@openkyber.com</p></div>

Kafka Streaming Analyst

Hansen Technologies

<div>
 <p>
  <em>
   Based in Bethlehem (5 days in office)
  </em>
 </p>
 <p>
  <strong>
   Who Are We
  </strong>
 </p>
 <p>
  Hansen Technologies is a leading global provider of software and services that enable organisations to transform customer experiences and streamline critical business processes. With a rich history of innovation and a footprint that spans over 80 countries, Hansen empowers utilities, energy, and communications companies to thrive in an ever-evolving digital landscape. Our commitment to excellence, customer focus, and collaborative culture makes Hansen a place where passionate professionals can make a meaningful impact, drive real change, and help shape the future of industries worldwide.
 </p>
 <p>
 </p>
 <p>
  <br/>
 </p>
 <p>
  We are proud to be an equal opportunities employer. Hansen prides itself on celebrating diversity and is committed to creating an inclusive environment for all employees, even extending this to how we work with our customers, partners, and suppliers. We welcome applications from all qualified candidates, regardless of age, disability, gender identity or expression, marital status, race, ethnicity, religion or belief, sexual orientation, or any other protected characteristic. If you require any adjustments or accommodation during the recruitment process, please let us know.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Why This Role Matters
  </strong>
 </p>
 <p>
 </p>
 <p>
  Protect and Enable, Detect and Respond, Engineer and Improve.
 </p>
 <p>
  As a Security Engineer based in Bethlehem, US, you will play a vital role in safeguarding the platforms that underpin critical infrastructure used by customers across the globe.
 </p>
 <p>
  You will help build, operate, and continuously improve Hansen&rsquo;s global security engineering and incident response capability, ensuring threats are detected early, incidents are handled decisively, and security is embedded across cloud, endpoints, and applications.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   What You&rsquo;ll Do
  </strong>
 </p>
 <ul>
  <li>
   <strong>
    Engineer Security Operations:
   </strong>
   Manage, tune, and optimize security platforms (SIEM, XDR, EDR, email, cloud security tools) to ensure accurate detection and actionable alerting.
  </li>
  <li>
   <strong>
    Respond to Incidents:
   </strong>
   Support security incident response across the Americas time zone, ensuring effective triage, investigation, documentation, and handover across global teams.
  </li>
  <li>
   <strong>
    Automate &amp; Scale:
   </strong>
   Design and implement SOAR playbooks and workflows to automate response, reduce manual effort, and improve SOC efficiency.
  </li>
  <li>
   <strong>
    Strengthen Cloud Security:
   </strong>
   Enhance the security posture of cloud environments (AWS, Azure, GCP) by implementing controls, monitoring, and secure DevSecOps practices.
  </li>
  <li>
   <strong>
    Reduce Risk:
   </strong>
   Drive vulnerability management activities, prioritize remediation, and support compliance and regulatory requirements.
  </li>
  <li>
   <strong>
    Continuously Improve:
   </strong>
   Contribute to the evolution of security processes, tooling, documentation, and incident response maturity across Hansen.
  </li>
 </ul>
 <p>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   What You Bring
  </strong>
 </p>
 <ul>
  <li>
   4+ years of experience in information security, with hands‑on focus in security operations, cloud security, or security engineering.
  </li>
  <li>
   Strong experience with security platforms such as SIEM, XDR, EDR, vulnerability management, and email security tools.
  </li>
  <li>
   Hands‑on exposure to SOAR platforms (e.g. Splunk SOAR, Palo Alto XSOAR, Swimlane, Tines) and a passion for automation.
  </li>
  <li>
   Solid scripting and automation skills (Python, PowerShell, or Bash).
  </li>
  <li>
   Practical experience securing public cloud environments (AWS, Azure, or GCP), including identity, monitoring, and workload protection.
  </li>
  <li>
   Strong understanding of networking, operating systems, and common attack techniques.
  </li>
  <li>
   Ability to work independently while collaborating effectively across a distributed, global security team.
  </li>
 </ul>
 <p>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Benefits and Perks
  </strong>
 </p>
 <p>
  Join us for a rewarding career with competitive compensation, leave entitlements, health coverage, and financial security. Enjoy work-life balance, growth, and recognition for your exceptional performance. Our team will unveil the intricacies of our benefit package during the selection process.
 </p>
</div>


Security Engineer

Cloudera

<div><div>Business Area:</div>
IT<div></div><div>
Seniority Level:</div>
Mid-Senior level<div></div><div>
Job Description:</div><div>
At Cloudera, we empower people to transform complex data into clear and actionable insights. With as much data under management as the hyperscalers, we're the preferred data partner for the top companies in almost every industry. Powered by the relentless innovation of the open source community, Cloudera advances digital transformation for the world&rsquo;s largest enterprises.</div><div></div><div>
As a Senior Security Response Engineer at Cloudera, you will be entrusted with fortifying the security posture of our organization. Your responsibilities will encompass a wide spectrum of threat detection, security analysis, and incident response activities. This role requires not only a deep technical understanding of cybersecurity but also strong problem-solving abilities, effective communication skills, and the capacity to work both independently as well as collaboratively in a team environment.</div><div></div><div><div><div><div><div><div><div><div><div><div>
In this dynamic and critical role within our Incident Response Function, staff will be part of a team responsible for monitoring, detecting, and responding to cybersecurity threats in real-time. The nature of our work requires a 24/7 operational capability, and as such, this position involves a shift schedule to ensure continuous vigilance and response readiness. The role is structured to work in various shift patterns, including nights, on-call, weekends, rotations, and holidays, with the possibility of extended hours during high-priority incidents. The ability to adapt to a changing schedule and maintain a high level of performance and attention to detail is essential. Our shift coverage is designed to balance operational requirements with employee well-being, as well as providing opportunities for further skills development.</div><div></div><div>
As the Senior Security Response Engineer, you will:</div><ul><li><div>
Proactively monitor and respond to security alerts and events from various sources, including SIEM, Cloud Security Platforms, EDR, and other technologies.</div></li><li><div>
Conduct in-depth analysis of security incidents to determine the root cause and impact, and recommend appropriate mitigation strategies.</div></li><li><div>
Collaborate with cross-functional teams to investigate and respond to security incidents, including documenting findings and actions taken.</div></li><li><div>
Develop and maintain incident response playbooks, processes, standards, procedures, and workflows to streamline response efforts and improve the organization's security posture.</div></li><li><div>
Participate in threat hunting activities to identify advanced threats and vulnerabilities.</div></li><li><div>
Identify, document, and research threat intelligence findings and reports.</div></li><li><div>
Independently complete tasks and projects as they arise.</div></li><li><div>
Collaborate with cross-functional teams on various cybersecurity initiatives.</div></li><li><div>
Provide mentorship and guidance to junior analysts and engineers.</div></li><li><div>
Assist in the evaluation and implementation of security tools and technologies.</div></li><li><div>
Stay up-to-date with emerging threats, vulnerabilities, and industry best practices.</div></li><li><div>
Continuously pursue forward thinking and unique solutions to security challenges.</div></li></ul><div></div><div><br>
We&rsquo;re excited about you if you have:</div><ul><li><div>
Robust analytical mindset and self-starter with a genuine interest in forward-thinking cybersecurity</div></li><li><div>
Relevant educational degree (Information Security / Information Assurance / Cybersecurity) or equivalent cybersecurity work experience (3-5 years)</div></li><li><div>
Three or more years of technical experience in providing large enterprise incident response and/or threat hunting</div></li><li><div>
Proficiency with security technologies, including SIEM, EDR, and cloud security systems.</div></li><li><div>
Strong understanding of cyber threats, attack techniques, and incident response methodologies.</div></li><li><div>
Must be able to independently analyze and respond to alerts and security incidents, including but not limited to triage, root cause analysis, and response coordination.</div></li><li><div>
Proficiency in analyzing and responding to threats on Linux-based systems</div></li><li><div>
Excellent problem-solving and communication skills.</div></li><li><div>
Ability to work effectively both independently and as part of a team.</div></li><li><div>
Proficiency in analyzing and responding to threats in one or more cloud/containerized environments (AWS/GCP/Azure/Kubernetes/Docker)</div></li><li><div>
Knowledge of threat intelligence methodologies</div></li></ul><div></div><div>
You may also have:</div><ul><li><div>
Supporting certifications such as EC-Council (CND/C|CSE), Comptia (CYSA+/CASP+), OffSec (OSCP/OSDA/OSTH/OSIR) or GIAC (GCIA/GCIH/GDAT/etc.)</div></li><li><div>
Experience in SOAR or Cloud/Linux digital forensics</div></li><li><div>
Experience with data analytics leveraging machine and/or deep learning</div></li></ul></div></div></div></div></div></div></div></div></div><div></div><div>
What you can expect from us:</div><ul><li><div>
Generous PTO Policy</div></li><li><div>
Support work life balance with <div>Unplugged Days</div></div></li><li><div>
Flexible WFH Policy</div></li><li><div>
Mental &amp; Physical Wellness programs</div></li><li><div>
Phone and Internet Reimbursement program</div></li><li><div>
Access to Continued Career Development</div></li><li><div>
Comprehensive Benefits and Competitive Packages</div></li><li><div><div>
Paid Volunteer Time</div></div></li><li><div>
Employee Resource Groups</div></li></ul><div></div><div>
EEO/VEVRAA</div><div></div><div>
#LI-ZY1</div></div>

Senior Security Response Engineer

DeepSource Technologies

<b>JOB PURPOSE:</b><br>
The Senior SOAR Engineer specializes in leveraging Cortex XSOAR to automate and orchestrate security operations across the organization. This role involves designing, implementing, and optimizing automated workflows, incident response strategies, and playbooks to enhance the efficiency of security operations.
<br><br>
ROLE AND RESPONSIBILITIES
<br><ul>
<li>Design and implement automation workflows using Cortex XSOAR to enhance incident response efficiency and reduce mean time to resolution (MTTR).</li>
<li>Develop and optimize playbooks addressing various security incidents and alerts, ensuring comprehensive coverage of the threat landscape.</li>
<li>Integrate Cortex XSOAR with existing security tools, ensuring smooth data flow and enhancing overall security posture.</li>
<li>Collaborate with SOC teams and other stakeholders to gather requirements and translate them into effective automation solutions.</li>
<li>Monitor and maintain the health of the Cortex XSOAR environment, troubleshooting issues and ensuring high availability.</li>
<li>Provide training and mentorship to junior staff and SOC analysts on SOAR best practices and usage of Cortex XSOAR.</li>
<li>Document workflows, processes, and playbook configurations as part of operational and compliance requirements.</li>
<li>Stay updated with the latest trends in security automation and SOAR technologies to continuously improve and adapt security operations.</li>
<li>Participate in incident response activities, contributing to investigations and post-incident reviews to improve future automation efforts.</li>
<li>Lead projects focused on adding new capabilities to the SOAR platform based on emerging threats and organizational needs.</li>
</ul>
<b>Requirements:</b><br>
<ul>
<li>Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.</li>
<li>5+ years of experience in security operations, incident response, or security engineering, with significant experience in SOAR solutions.</li>
<li>Proficient understanding of Cortex XSOAR platform, including playbook development and integration with security tools.</li>
<li>Experience in scripting and automation (e.g., Python, JavaScript) for workflow improvements.</li>
<li>Strong analytical and problem-solving skills, with proven ability to work in fast-paced environments.</li>
<li>Excellent communication skills, capable of collaborating with diverse teams and stakeholders.</li>
</ul>
<b>Benefits:</b><br>
<ul>
<li>Private Health Insurance ( Family )</li>
<li>Social Insurance</li>
</ul>


Threat Intelligence & SOAR Specialist - Riyadh,KSA

Motive

<div><div><p><b>Who we are:</b></p>
<p>
Motive empowers the people who run physical operations with tools to make their work safer, more productive, and more profitable. For the first time ever, safety, operations and finance teams can manage their drivers, vehicles, equipment, and fleet related spend in a single system. Combined with industry leading AI, the Motive platform gives you complete visibility and control, and significantly reduces manual workloads by automating and simplifying tasks.</p>
<p>
Motive serves nearly 100,000 customers &ndash; from Fortune 500 enterprises to small businesses &ndash; across a wide range of industries, including transportation and logistics, construction, energy, field service, manufacturing, agriculture, food and beverage, retail, and the public sector.</p>
<p>
Visit gomotive.com to learn more.</p></div><div><h3 class="jobSectionHeader"><b>
About the Role:</b></h3>
<p>
As a Cloud Ops Engineer in the Platform Engineering organization, you will be a core member of the team responsible for the operational health, reliability, and observability of the entire Motive platform. Your mission is to ensure our globally distributed, highly-available systems recover from issues quickly and help ensure we avoid future issues. You will spearhead the effort to manage incident response, build world-class monitoring systems, and drive automation across all operational workflows. This is a critical role that improves the daily lives of engineers and ensures a consistent, high-quality experience for all our customers, across all our complex tech stacks from our core SaaS product to our mobile and AI-powered embedded systems. If you are passionate about high-leverage work, automation, continuously improving critical systems and processes, being involved across all areas of engineering, and are able to be the strong calm in the middle of incidents, this is the perfect role for you.</p>
<h3 class="jobSectionHeader"><b>
What You'll Do:</b></h3>
<ul><li>Own and refine the incident management lifecycle and be the incident commander, running communication and triage, and post-incident analysis and follow-ups to drive continuous service improvement.</li>
<li>Manage the central on-call solution and integrations used by over 100 teams from different monitoring and other platforms, leveraging automation and self-serve tools such as terraform.</li>
<li>Analyze operational statistics (MTTR, incident frequency, service-level data) to identify trends and prioritize reliability initiatives and teams&rsquo; focus.</li>
<li>Improve change management processes and automation to reduce both risk and friction.</li>
<li>Collaborate with engineering teams across the organization to standardize operational practices and develop automated workflows.</li>
<li>Leverage AI for incident analysis, alert/issue solutioning, and automation.</li>
</ul><h3 class="jobSectionHeader"><b>What We're Looking For:</b></h3>
<p>
We are looking for an individual with prior experience in cloud operations, site reliability engineering, or a similar field, who has a passion for improving system reliability and operational processes in a large-scale, distributed environment.</p>
<ul>
<li>Experience managing and participating in a 24/7 on-call rotation and incident response process.</li>
<li>Experience with on-call systems such as Rootly, PagerDuty, Opsgenie, etc.</li>
<li>Experience with monitoring and observability tools (e.g., Datadog, NewRelic, Grafana, etc.).</li>
<li>Ability to communicate clearly and manage incidents, communications, and action items with stakeholders from engineers to directors, and public-facing messaging.</li>
<li>Experience with IT Service Management tools (Jira/JSM) for ticket and change management.</li>
<li>3+ years experience in an incident response role.</li></ul><br>
<p></p>
<h3 class="jobSectionHeader"><b>
Bonus Skills to have:</b></h3>
<ul><li>Experience with Infrastructure as Code (IaC) tools such as Terraform.</li>
<li>Scripting and automation skills in at least one modern language (Python, Go, Bash) - AI-coding assistance welcomed.</li>
<li>Prior experience in an Ops or SRE team supporting a diverse cloud product.</li>
</ul></div><div><p><i>
Creating a diverse and inclusive workplace is one of Motive's core values. We are an equal opportunity employer and welcome people of different backgrounds, experiences, abilities and perspectives.</i></p>
<p><i>
Please review our Candidate Privacy Notice </i><i>here</i><i>.</i></p>
<p><i>
UK Candidate Privacy Notice </i><i>here</i><i>.</i></p>
<p><i>
The applicant must be authorized to receive and access those commodities and technologies controlled under U.S. Export Administration Regulations. </i><i>It is Motive's policy to require that employees be authorized to receive access to Motive products and technology.</i></p></div></div>

Cloud Ops Engineer New

Search 10000+ Incident response engineer jobs near you this March. New roles added regularly across leading industries. Apply today.