security automation engineer

Concentrix

<div><div><div><p><b>Global Security
</b></p></div><div><div><div><b>Location</b></div>
<div>Gurugram, India</div></div></div><div></div><div><div><br>
</div><p>Job Title:</p>
SOC Engineering &ndash; Product &amp; Automation<p>
Job Description</p>
We are looking for a SOC Product &amp; Automation Engineer to join our CDOC Engineering team. The role will focus on SIEM engineering and SOAR automation, with hands-on expertise in Palo Alto XSIAM and XSOAR. You&rsquo;ll design and optimize automation playbooks, build SIEM detections, and work closely with MSS SOC and clients to deliver scalable, efficient security operations.<h3 class="jobSectionHeader"><b>
Job Title:</b><b> SOC Product &amp; Automation Engineer</b></h3><div><b>
Location:</b> On-site &ndash; Gurgaon, Cyber City<br>
<b>Experience Required:</b> 4&ndash;5 years<br>
<b>Department:</b> CDOC Engineering</div><h3 class="jobSectionHeader"><b>
Role Overview</b></h3><div>
We are seeking a skilled <b>SOC Product &amp; Automation Engineer</b> with 4&ndash;5 years of experience in <b>SIEM engineering</b> and <b>SOAR automation</b>. The role requires hands-on expertise in <b>Palo Alto XSIAM and XSOAR</b>, focusing on building, optimizing, and maintaining automation frameworks to enhance SOC operations. This is an <b>on-site position in Gurgaon (Cyber City)</b>, requiring close collaboration with CDOC Engineering and MSS SOC teams.</div><h3 class="jobSectionHeader"><b>
Key Responsibilities</b></h3><ul><li><div>
Design, build, and maintain <b>SIEM use cases</b> and detections within <b>Palo Alto XSIAM</b>.</div></li><li><div>
Develop, test, and manage <b>SOAR playbooks</b> and integrations in <b>XSOAR</b> to automate SOC workflows.</div></li><li><div>
Partner with MSS SOC and engineering teams to deliver automation for <b>incident response and threat management</b>.</div></li><li><div>
Support <b>POCs and client engagements</b>, ensuring solutions meet security and business requirements.</div></li><li><div>
Optimize existing automation to improve SOC efficiency and reduce manual workload.</div></li><li><div>
Provide <b>Level 3 engineering support</b> for automation-related escalations.</div></li><li><div>
Document automation processes, playbooks, and engineering standards for reuse and scalability.</div></li></ul><h3 class="jobSectionHeader"><b>
Required Skills &amp; Experience</b></h3><ul><li><div>
4&ndash;5 years of experience in <b>SIEM engineering</b> and <b>SOAR automation</b>.</div></li><li><div>
Strong hands-on expertise with <b>Palo Alto XSIAM and XSOAR</b> (mandatory).</div></li><li><div>
Proficiency in developing automation playbooks, integrations, and APIs.</div></li><li><div>
Knowledge of scripting languages such as <b>Python</b> or <b>JavaScript</b>.</div></li><li><div>
Strong understanding of <b>SOC operations, incident response, and threat detection workflows</b>.</div></li><li><div>
Familiarity with security frameworks (e.g., <b>MITRE ATT&amp;CK, NIST</b>).</div></li><li><div>
Excellent troubleshooting and problem-solving skills.</div></li></ul><h3 class="jobSectionHeader"><b>
Nice-to-Have</b></h3><ul><li><div>
Exposure to other SIEM/SOAR platforms (Splunk, QRadar, Sentinel, etc.).</div></li><li><div>
Experience in <b>Managed Security Services (MSS)</b> or client-facing SOC environments.</div></li><li><div>
Relevant certifications: <b>PCSCE, PCNSE, or equivalent</b>.</div></li></ul><h3 class="jobSectionHeader"><b>
What We Offer</b></h3><ul><li><div>
Opportunity to work on cutting-edge <b>XSIAM/XSOAR implementations</b>.</div></li><li><div>
Exposure to <b>global MSS clients</b> and enterprise security environments.</div></li><li><div>
Career growth in <b>SOC engineering, automation, and product development</b>.</div></li></ul><p>
Location:</p>
IND Gurgaon - Bld 14 IT SEZ Unit 1, 5th, 6th and 17th Flr<p>
Language Requirements:</p><p>
Time Type:</p>
Full time<p><b>
If you are a California resident, by submitting your information, you acknowledge that you have read and have access to the </b><b>Job Applicant Privacy Notice for California Residents</b></p></div></div></div><div></div>

SOC Engineering – Product & Automation

HCLTech

<p></p><div><div><div><div>This role oversees and optimizes security operations using Palo Alto XSIAM and related technologies, driving continuous process improvement and ensuring the operational excellence of large-scale support projects. The position is accountable for aligning service delivery with client commitments, fostering technical innovation, and empowering teams to achieve organizational objectives.<br>
<br>
(1.) <b>Key Responsibilities</b><br>
1. Lead security operations by leveraging Palo Alto XSIAM and Cortex to monitor, detect, and respond to advanced threats, ensuring high service availability and compliance with client SLAs.<br>
<br>
2. Optimize digital experience monitoring using Palo Alto ADEM, proactively identifying performance issues and implementing improvements to enhance end-user satisfaction.<br>
<br>
3. Drive continuous improvement initiatives by analyzing security operations data within Palo Alto platforms, recommending process enhancements, and integrating automation for efficiency gains.<br>
<br>
4. Mentor and guide the support team in the effective use of Palo Alto XSIAM and Cortex tools, promoting best practices and advanced troubleshooting methodologies.<br>
<br>
5. Oversee incident management and escalation processes, utilizing Palo Alto technologies to ensure timely resolution and transparent communication with clients.<br>
<br>
6. Collaborate within the team to introduce innovative solutions using Palo Alto product suite, aligning operational strategies with organizational and client goals.<br>
<br>
<b>Skill Requirements</b><br>
1. Excellent Knowledge Of Siem, Soar, And Digital Experience Monitoring Within Palo Alto Environments.<br>
<br>
2. Advanced Skills In Incident Detection, Response, And Escalation Using Palo Alto Security Tools.<br>
<br>
3. Strong Ability To Analyze Operational Data And Drive Process Improvements Through Automation And Innovation.<br>
<br>
4. Excellent Communication And Leadership Skills For Mentoring Teams And Managing Critical Operations.<br>
<br>
<b>Certification</b><br>
1. Palo Alto Networks Certified Security Automation Engineer (PCSAE) certification is highly recommended.<br>
<br>
2. Palo Alto Networks Certified Network Security Engineer (PCNSE) certification is optional but valuable.</div>
</div><div><p><b>No. of Positions</b></p>
<div>1</div>
</div><div><p><b>Skill (Primary)</b></p>
<div>Information Security-Perimeter Security Operations-Firewall
</div></div><div><p><b>Auto req ID</b></p>
<div>1628175BR</div>
</div><div><p><b>Skill Level 3 (Secondary Skill 1)</b></p>
<div>Cyber Security-InfraSec-FIREWALL
</div></div><div><p><b>Skill Level 3 (Secondary Skill 2)</b></p>
<div>Cyber Security-InfraSec-FIREWALL
</div></div><div><p><b>Skill Level 3 (Secondary Skill 3)</b></p>
<div>Cyber Security-InfraSec-FIREWALL
</div></div><div><p><b>Skill Level 3 (Secondary Skill 4)</b></p>
<div>Information Security-End point Security operation-DIGITAL EXPERIENCE MONITORING</div></div></div></div><div></div>

CONSULTANT

Friends Color Images

<div><div><h3 class="jobSectionHeader"><b>Job Information</b></h3>
<ul><div><p>Date Opened</p>
<div><b>15/10/2025</b><b>
</b></div></div><div><p>Province</p>
<div><b>Uttar Pradesh</b><b>
</b></div></div><div><p>Job Type</p>
<div><b>Full time</b><b>
</b></div></div><div><p>Industry</p>
<div><b>IT Services</b><b>
</b></div></div><div><p>Shift Timing</p>
<div><b>General day shift</b><b>
</b></div></div><div><p>Work Experience</p>
<div><b>4-6 years</b><b>
</b></div></div><div><p>Weekly Off</p>
<div><b>5 Day working with Saturday and Sunday off</b><b>
</b></div></div><div><p>City</p>
<div><b>Noida</b><b>
</b></div></div><div><p>Country</p>
<div><b>India</b><b>
</b></div></div><div><p>Postal Code</p>
<div><b>201303</b><b>
</b></div></div></ul></div><div><h3 class="jobSectionHeader"><b>Job Description</b></h3>
<div><div><b>Broad Function:</b><br>
<br>
</div><div></div><br>
<div>As a Security Engineer, your primary focus will be on securing code before it reaches production and ensuring that vulnerabilities are identified and addressed early in the development lifecycle. You will play a key role in code scanning and vulnerability assessment, ensuring that all code entering production is secure, compliant, and free from vulnerabilities.<br>
</div><div>
Your responsibilities will include integrating security practices into the CI/CD pipeline to automate security checks and vulnerabilities remediation. By embedding security throughout the Secure Software Development Life Cycle (SSDLC), you will work closely with development, DevOps, and security teams to ensure a proactive approach to security, preventing vulnerabilities from making it to production.</div><div></div><div><b><br>
Roles and Responsibilities:</b></div><div></div><div><b><br>
Code Review &amp; Vulnerability Assessment:</b><br>
</div><ul><li>
Conduct manual and automated code reviews to identify security vulnerabilities, focusing on OWASP Top 10, CWE Top 25, and business logic flaws.<br>
</li><li>
Integrate security controls across all stages of the Secure SDLC, from development to deployment. Work with developers to ensure vulnerabilities are caught before code is pushed to production by integrating security checks into the CI/CD pipeline.<br>
</li><li>
Conduct regular security reviews, threat modelling, and risk assessments for applications and infrastructure.<br>
</li><li>
Ensure timely patching, vulnerability mitigation, and compliance with internal security policies.<br>
</li><li>
Work closely with development teams to promote secure coding practices and perform Security Code Reviews (SCR).<br>
</li><li>
Contribute to continuous improvement of DevSecOps pipelines, documentation, and security automation.<br>
</li><li>
Track vulnerabilities identified through security tools and ensure that they are promptly prioritized and remediated.</li></ul><div></div><div><b><br>
Security Tool Integration:</b><br>
</div><ul><li>
Configure, automate and maintain scanning tools like CNAPP Orca, Prisma cloud etc. Or any other on-premise scanning tools applicable.<br>
</li><li>
Automate and maintain security scanning pipelines using tools like SonarQube, OWASP ZAP, Burp Suite Enterprise, Snyk, Trivy, or Checkmarx.<br>
</li><li>
Automate security scans within the build and deployment pipeline (e.g., using Jenkins, GitLab CI, GitHub Actions).<br>
</li><li>
Ensure proper data encryption in transit and at rest and validate key/certificate rotation practices.<br>
</li></ul><div><b>
Collaboration &amp; Culture Building:</b><br>
</div><ul><li>
Collaborate with developers, DevOps, and security teams to integrate security into the development process.<br>
</li><li>
Collaborate with DevOps and infrastructure teams to ensure runtime hardening, log integrity, and secure configuration baselines in on-premise deployments.<br>
</li><li>
Provide support and mentoring to junior team members on secure coding practices and the use of security tools.</li></ul><div></div><div><b><br>
Security Standards &amp; Compliance:</b><br>
</div><ul><li>
Ensure code complies with relevant regulatory and security standards such as PCI-DSS, ISO 27001, and internal security policies. Act as first technical responder for product-related incidents; perform root-cause analysis and coordinate patch release within defined SLAs.<br>
</li></ul><div><b>
Incident Response &amp; Remediation:</b><br>
</div><ul><li>
Participate in incident response activities and collaborate with teams to remediate identified vulnerabilities</li></ul><div></div><h3 class="jobSectionHeader"><b><br>
Requirements</b></h3><div><b>
</b><b>Desired Candidate profile:</b><br>
<br>
</div><div></div><br>
<ul><li>Educational Background: Bachelor&rsquo;s degree in computer science, Information Security, or a related field.<br>
</li><li>
Experience: 3&ndash;4 years of hands-on coding (to fix or co-fix vunerabilites) experience in Application Security, code review, security architecture. Experience in DevSecOps will be added advantage<br>
</li><li>
Strong knowledge of Secure SDLC methodologies and security automation.<br>
</li><li>
Experience integrating SAST, DAST, and SCA tools within CI/CD pipelines.<br>
</li><li>
Good understanding of VAPT processes and coordination with pen testing teams<br>
</li><li>
Technical Proficiency: Strong understanding of programming language Java is must<br>
</li><li>
Proficiency in scripting languages (Python, Bash, or PowerShell).<br>
</li><li>
Understanding of OWASP Top 10, CWE, and common vulnerability management frameworks.<br>
</li><li>
Well versed with Security Frameworks: Industry standards and frameworks such as OWASP, NIST, and SANS.<br>
</li><li>
Soft Skills: Strong communication and interpersonal skills to collaborate with cross-functional teams and stakeholders.<br>
</li><li>
Cloud Security Knowledge: Experience with cloud platforms like AWS, Azure, or GCP and understanding of cloud security best practices.</li></ul><div></div><div><br>
<br>
</div><br>
<h3 class="jobSectionHeader"><b>Benefits</b></h3><div><b>
The company offers a range of employee benefits including:</b><br>
<br>
</div><div></div><br>
<ul><li>Cashless medical insurance for employees, spouses, and children<br>
</li><li>
Accidental insurance coverage<br>
</li><li>
Life insurance coverage<br>
</li><li>
Retirement benefits including Provident Fund (PF) and Gratuity<br>
</li><li>
ESI*<br>
</li><li>
Sodexo benefits for income tax savings<br>
</li><li>
Paternity &amp; Maternity Leave Benefit<br>
</li><li>
National Pension Saving</li></ul></div></div></div><p></p>

Security Engineer

Finastra

<div><h1 class="jobSectionHeader"><b>Who are we?<br>
</b></h1><p><br>
At Finastra, we are a dynamic global provider of open finance software solutions, dedicated to expanding access to financial services. Our innovative applications span Lending, Payments, Treasury and Capital Markets, and Universal Banking. Proudly serving over 8,000 customers, including 45 of the world's top 50 banks, we aim to boost financial inclusion for all. Join us and be part of a vibrant company that embraces diverse perspectives, and is committed to doing well by doing good.
</p><p></p><p><b>with What will you contribute?
</b><br>
<br>
We are seeking a highly motivated and skilled Security Engineer specializing in Data Loss Prevention (DLP) and Data Exfiltration controls within cloud and hybrid environments. The ideal candidate will possess demonstrated expertise in Microsoft Azure security solutions, with a proven track record of delivering automated and integrated security solutions. Scripting capabilities in Python and PowerShell, along with practical knowledge of generative AI and Large Language Models (LLMs), are essential.
</p><p></p><p><b>Key Responsibilities
</b></p><p></p><p>- Design, implement, and manage DLP and data exfiltration controls across cloud and hybrid infrastructures.
</p><p>- Develop automation scripts and integrations using Python and PowerShell to streamline security operations.
</p><p>- Collaborate with cross-functional teams to ensure security solutions meet organizational and compliance standards.
</p><p>- Leverage generative AI/LLMs to enhance threat detection, prevention, and response workflows.
</p><p>- Monitor, analyze, and respond to security incidents involving data leakage or unauthorized data access.
</p><p>- Continuously improve security posture through proactive risk assessments and process enhancements.
</p><p></p><p><b>Required Qualifications
</b></p><p>Bachelor&rsquo;s degree or equivalent in Computer Science, Cybersecurity, or a related field.
</p><p>- <b>3&ndash;5 years of experience in cloud security, with a focus on DLP and data exfiltration </b>.
</p><p>- <b>Hands-on experience with Microsoft Azure security services and architecture.
</b></p><p>- <b>Strong scripting skills in Python and PowerShell for automation and integration tasks.
</b></p><p>- <b>Must have experience in security tools such as Microsoft Purview, Defender for Cloud, Sentinel.
</b></p><p>- Practical knowledge of generative AI and LLMs in security contexts.
</p><p>- Proven problem-solving abilities and the capacity to work independently.
</p><p><b>Experience with Industry leading DLP Tools
</b></p><p></p><p><b>Preferred Skills
</b></p><p><b>Certifications such as AZ-500, CISSP, or GIAC or Similar.
</b></p><p>- Experience with other cloud platforms like AWS or GCP is a plus.
</p><p>- Excellent communication, documentation, and collaborative skills.
</p><p></p><p><b>Timings : </b><b>Mon-Friday:11am till 8.30PM
</b></p><p></p><p>We are proud to offer a range of incentives to our employees worldwide. These benefits are available to everyone, regardless of grade, and reflect the values we uphold:<br>
</p><p></p><br>
<p>&middot; <b>Flexibility: </b>Enjoy unlimited vacation, based on your location and business priorities. Hybrid working arrangements, and inclusive policies such as paid time off for voting, bereavement, and sick leave.
</p><p>&middot; <b>Well-being: </b>Access confidential one-on-one therapy through our Employee Assistance Program, unlimited personalized coaching via our coaching app, and access to our Gather Groups for emotional and mental support.
</p><p>&middot; Medical, life &amp; disability insurance, retirement plan, lifestyle and other benefits*
</p><p>&middot; <b>ESG: </b>Benefit from paid time off for volunteering and donation matching.
</p><p>&middot; <b>DEI: </b>Participate in multiple DE&amp;I groups for open involvement (e.g., Count Me In, Culture@Finastra, Proud@Finastra, Disabilities@Finastra, Women@Finastra).
</p><p>&middot; <b>Career Development: </b>Access online learning and accredited courses through our Skills &amp; Career Navigator tool.
</p><p>&middot; <b>Recognition </b>: Be part of our global recognition program, Finastra Celebrates, and contribute to regular employee surveys to help shape Finastra and foster a culture where everyone is engaged and empowered to perform at their best.<br>
</p><div><br>
<ul><li>Specific benefits may vary by location.
</li></ul></div><p></p><p>At Finastra, each individual is unique, bringing their own ideas, thoughts, cultural beliefs, backgrounds, and experiences together. We learn from one another, embrace and celebrate our differences, and create an environment where everyone feels safe to be themselves.
</p><p></p><p>Be unique, be exceptional, and help us make a difference at Finastra!</p></div>

Expert Information Security Engineer

Target

The pay range is $95,000.00 - $171,000.00<p></p><p> Pay is based on several factors which vary based on position. These include labor markets and in some instances may include education, work experience and certifications. In addition to your pay, Target cares about and invests in you as a team member, so that you can take care of yourself and your family. Target offers eligible team members and their dependents comprehensive health benefits and programs, which may include medical, vision, dental, life insurance and more, to help you and your family take care of your whole selves. Other benefits for eligible team members include 401(k), employee discount, short term disability, long term disability, paid sick leave, paid national holidays, and paid vacation. Find competitive benefits from financial and education to well-being and beyond at . </p><p></p><p><b>About us:</b><br />Working at Target means helping all families discover the joy of everyday life. We bring that vision to life through our values and culture. Learn more about Target here.</p><p></p><p><b>As a Senior Application Security Engineer, </b><b>you serve as a specialist in the engineering team that supports the product.</b> You help develop and gain insight in the application architecture. You can distill an abstract architecture into concrete design and influence the implementation. You show expertise in applying the appropriate software engineering patterns to build robust and scalable systems. You are an expert in programming and apply your skills in developing the product. You have the skills to design and implement the architecture on your own but choose to influence your fellow engineers by proposing software designs, providing feedback on software designs and/or implementation. You show good problem-solving skills and can help the team in triaging operational issues. You leverage your expertise in eliminating repeat occurrences.</p><p></p><p>Use your skills, experience and talents to be a part of groundbreaking thinking and visionary goals. As a Sr. Engineer, you'll take the lead as you </p><ul><li>Design, build, and operate <b>security tooling and automation</b> that integrates deeply into development workflows (e.g., CI/CD, linting, auto-fix, click-to-fix flows).</li><li>Create solutions that make the <b>secure path the easiest path</b> - embedding guardrails, reducing manual fixes, and improving the developer experience at scale.</li><li>Augment existing processes with a <b>security lens</b>: dependency scanning, SAST/DAST/SCA, supply chain risk, and automated remediations.</li><li>Collaborate with product engineering teams to <b>enable secure-by-default applications</b>, influencing architecture and design with practical security guidance.</li><li>Build "push-down" solutions such as rules, plugins, and pipeline integrations so that security issues are surfaced and fixed where code is written.</li><li>Evaluate new opportunities to improve security across Target's environment, targeting solutions that deliver the greatest impact.</li><li>Maintain observability and feedback loops for security signals across production systems.</li><li>Contribute to disaster recovery and incident response planning with a focus on application-layer resilience.</li><li>Share knowledge and mentor teammates in security engineering practices, fostering a culture of curiosity and shared ownership.</li></ul><p></p><p>This role is part of a team <b>changing how security is done at scale</b> - delivering automation, guardrails, and fixes that directly shape how applications are built securely across Target.</p><p></p><p>Core responsibilities of this job are described within this job description. Job duties may change at any time due to business needs.</p><p></p><p><b>About you:</b></p><ul><li>Four-year degree or equivalent experience</li><li>5+ years in software development <b>or security engineering</b> with strong coding skills</li><li>Experience building or maintaining <b>security tools, automations, or frameworks</b> (e.g., integrating scanners, writing rules, developing CI/CD integrations)</li><li>Proficiency in Java, Kotlin, JavaScript/TypeScript, and experience with containerization (e.g., Docker)</li><li>Experience working with CI/CD systems (Jenkins, GitHub Actions, GitLab CI, etc.)</li><li>Strong understanding of <b>open source dependencies, supply chain risks, and SCA techniques</b></li><li>Familiarity with SAST/DAST tools and ability to translate results into actionable fixes</li><li>Practical experience in <b>security code reviews, threat modeling, or vulnerability assessment</b></li><li>Demonstrated ability to embed security into developer workflows and improve the developer experience</li><li>Passion for staying current with security trends, tools, and developer-centric security models</li><li>Preferred (not required): <b>security certifications</b> such as CISSP, CSSLP, OSCP, GIAC, CompTIA Security+, or equivalent demonstrated expertise</li></ul><p></p><p> This position will operate as a <b><u>Hybrid/Flex for Your Day</u></b> work arrangement based on Target's needs. A Hybrid/Flex for Your Day work arrangement means the team member's core role will need to be performed both onsite at the Target HQ MN location the role is assigned to and virtually, depending upon what your role, team and tasks require for that day. Work duties cannot be performed outside of the country of the primary work location, unless otherwise prescribed by Target. Click here if you are curious to learn more about Minnesota. </p><p></p><p></p><p></p><p></p><p></p><p></p><p></p><p><b>Benefits Eligibility</b></p>Please paste this url into your preferred browser to learn about benefits eligibility for this role: <p></p><p></p><p></p><p></p><p><b> Americans with Disabilities Act (ADA) </b></p><p></p><p> In compliance with state and federal laws, Target will make reasonable accommodations for applicants with disabilities. If a reasonable accommodation is needed to participate in the job application or interview process, please reach out to . Non-accommodation-related requests, such as application follow-ups or technical issues, will not be addressed through this channel. </p><p></p><p></p><img src="https://www.jobg8.com/Tracking.aspx?Efpc8UlCsYd0pjjD63a5P9vxGqNrfmQyu" width="0" height="0" />

Senior Application Security Engineer

Tenex.Ai

<div><p><b>Company Summary: </b>TENEX.AI is an AI-native, automation-first, built-for-scale Managed Detection and Response (MDR) provider. We are a force multiplier for defenders, helping organizations enhance their cybersecurity posture through advanced threat detection, rapid response, and continuous protection. Our team is comprised of industry experts with deep experience in cybersecurity, automation, and AI-driven solutions. We&rsquo;re a fast growing startup backed by industry experts and top tier investor Andreessen Horowitz. As an early employee, you&rsquo;ll play a meaningful role in defining and building our culture. Get in on the ground floor. We&rsquo;re a small but well-funded team that just raised a substantial round &ndash; joining now comes with limited risk and unlimited upside. We are rapidly growing and seeking top talent to join our mission of revolutionizing the cybersecurity landscape.</p><p><b>
Job Summary:</b> We are seeking a highly skilled and proactive <b>Senior Cybersecurity Analyst </b>to join our Security Operations Center (SOC) team. The ideal candidate will have a strong background in cybersecurity, leading and mentoring other team members, coupled with experience in leveraging AI and machine learning (ML) technologies, particularly in the context of Google&rsquo;s SecOps platform (e.g. Google Chronicle), to enhance the detection, analysis, and response to security incidents. This role is integral to safeguarding digital infrastructure, ensuring rapid detection of threats, and supporting continuous improvement of security processes.</p><p></p><p>
Culture is one of the most important things at TENEX.AI&mdash;check out our culture deck at culture.tenex.ai to experience how we champion it, valuing the unmatched collaboration and community of in-person work while offering flexibility for the best of the best.</p><p>
This role is for the extraordinary&mdash;the pinnacle 10x of 10x legends in any role&mdash; where we make exceptions to our in-person hiring to champion full remote freedom, empowering you to conquer without boundaries while still inviting you to join our in-person energy from time to time.</p><p>
To be direct up front - If you&rsquo;re looking at this position, we strongly recommend you consider accepting one of our lucrative relocation packages to our epic hubs in Sarasota, Florida (outside Tampa), or Overland Park in the Kansas City metro&mdash;where trailblazers redefine cybersecurity with 10x impact!</p><p>
In Florida, you can break free from overly inflated cost of living sky-high taxes (like those of you trapped in California or New York) via our incredibly aggressive relocation packages, enjoying zero state income tax, boundless personal freedom, a pro-business surge, endless sunshine, and a pro-family haven in the master-planned Lakewood Ranch with elite amenities and vibes. In KC, leverage those same powerhouse relocation perks for lower taxes, authentic Midwest values of integrity and community, and a supportive, family-oriented ecosystem for enduring wins. See those respective listings with more details on our careers page.</p><p>
For candidates who embody the rare &quot;10x of 10x&quot; talent, we offer the flexibility of fully remote work. If you are an exceptional, unrivaled force in this role and prefer not to relocate at this time, we encourage you to apply for this remote-first position. Please be aware that the competition for these remote roles is exceptionally fierce, and the standards for selection are significantly higher.</p><p><b>
Key Responsibilities:</b></p><ul><li><p><b>
Threat Monitoring &amp; Detection:</b></p><ul><li><p>
Monitor security alerts and events across the enterprise network, using both traditional cybersecurity tools and AI/ML-powered threat detection systems.</p></li><li><p>
Perform triage, investigation, and correlation of security events to determine the severity and impact of potential threats.</p></li><li><p>
Leverage Google Chronicle's capabilities for threat intelligence and log analysis, enhancing visibility and providing insights into potential security incidents.</p></li><li><p>
Apply AI to identify patterns, anomalies, and behaviors indicative of potential security incidents, reducing false positives and improving detection accuracy.</p></li><li><p>
Participate in on-call rotations and team scheduling for critical security incidents as needed.</p></li></ul></li><li><p><b>
Incident Response &amp; Analysis:</b></p><ul><li><p>
Investigate and analyze security incidents and breaches, leveraging AI to automate initial analysis and enhance threat hunting efforts.</p></li><li><p>
Respond to security incidents following established procedures, including containment, eradication, and recovery actions.</p></li><li><p>
Conduct root cause analysis and forensic investigations to understand attack vectors and recommend mitigation strategies.</p></li><li><p>
Utilize Google SecOps and Chronicle&rsquo;s advanced tools to centralize security data, correlate events, and accelerate incident response workflows.</p></li><li><p>
Apply machine learning algorithms to identify emerging threats and trends, providing actionable insights for incident response.</p></li></ul></li><li><p><b>
Google SecOps &amp; Chronicle Integration:</b></p><ul><li><p>
Work with Google SecOps platform tools to streamline security operations, improve threat visibility, and automate workflows.</p></li><li><p>
Collaborate with IT, Security, and Data Science teams to integrate Google Chronicle&rsquo;s capabilities into the SOC, enhancing threat detection and incident resolution.</p></li><li><p>
Optimize Google Chronicle for log management, threat hunting, and advanced analytics.</p></li></ul></li><li><p><b>
Security Automation:</b></p><ul><li><p>
Develop and maintain automated workflows for common security incidents, leveraging AI for intelligent decision-making and faster response times.</p></li><li><p>
Automate routine SOC tasks such as log analysis, incident classification, and threat intelligence enrichment using Google SecOps and Chronicle integrations.</p></li></ul></li><li><p><b>
Reporting &amp; Documentation:</b></p><ul><li><p>
Create detailed reports on incidents and threat intelligence summaries integrating AI-driven findings and insights.</p></li><li><p>
Prepare regular performance and security posture reports for internal stakeholders, highlighting key AI-driven improvements and threat mitigation outcomes.</p></li><li><p>
Generate and present reports on threat trends, and SOC operations for internal stakeholders and customers.</p></li><li><p>
Provide recommendations for security improvements and contribute to SOC playbook development.</p></li></ul></li><li><p><b>
Collaboration &amp; Knowledge Sharing:</b></p><ul><li><p>
Work closely with cross-functional teams (e.g., IT, Customer Success, Engineering) to promote and improve AI-driven security initiatives and improve the customers' overall security posture.</p></li><li><p>
Share knowledge of AI-powered security techniques and Google SecOps tools with SOC team members to enhance their capabilities in threat detection and incident response.</p></li></ul></li></ul><p><b>
Qualifications:</b></p><ul><li><p><b>
Education:</b> Bachelor&rsquo;s degree in Computer Science, Information Security, or a related field, or equivalent work experience. Relevant certifications (e.g., CISSP, CISM, CEH) are a plus.</p></li><li><p><b>
Experience:</b></p><ul><li><p>
4+ years of experience in a Security Operations Center (SOC) or a similar security-focused role.</p></li><li><p>
Hands-on experience with security analytics, log management, threat hunting, and incident response.</p></li><li><p>
Interest in applying automation and/or artificial intelligence and machine learning techniques to cybersecurity tasks, such as threat detection, anomaly detection, and security automation.</p></li></ul></li><li><p><b>
Technical Skills:</b></p><ul><li><p>
Strong understanding of cybersecurity concepts and frameworks (e.g., NIST, Mitre, ISO, Killl Chain).</p></li><li><p>
Experience with tools for cybersecurity, such as intrusion detection systems (IDS), SIEM tools, and security automation platforms.</p></li><li><p>
Proficiency in scripting languages (e.g., Python, PowerShell) for automation and integration.</p></li><li><p>
Knowledge of security technologies such as firewalls, endpoint protection, IDS/IPS, and threat intelligence platforms.</p></li></ul></li><li><p><b>
Soft Skills:</b></p><ul><li><p>
Strong analytical and problem-solving skills.</p></li><li><p>
Excellent communication skills for interacting with internal teams and external customers.</p></li><li><p>
Ability to work under pressure in a fast-paced, dynamic environment.</p></li></ul></li></ul><p><b>
Preferred Skills:</b></p><ul><li><p>
Experience with security orchestration, automation, and response (SOAR) platforms.</p></li><li><p>
Exposure to cloud security platforms (e.g., AWS, Azure, Google Cloud) and the associated risks.</p></li><li><p>
Practical experience working with Google SecOps tools and Chronicle for centralized threat intelligence and event correlation a plus.</p></li><li><p>
Hands-on experience with the Microsoft security platform (Sentinel, Defender) is a plus.</p></li></ul><p><b>
Why Join Us?</b></p><ul><li><p>
Opportunity to work with cutting-edge AI-driven cybersecurity technologies and Google SecOps solutions.</p></li><li><p>
Collaborate with a talented and innovative team focused on continuously improving security operations.</p></li><li><p>
Competitive salary and benefits package.</p></li><li><p>
A culture of growth and development, with opportunities to expand your knowledge in AI, cybersecurity, and emerging technologies.</p></li></ul><p>
If you're passionate about combining cybersecurity expertise with artificial intelligence and have experience with Google SecOps and Chronicle, we encourage you to apply!</p></div>

Senior Cybersecurity Analyst (Remote)

DTS Solution

Role and Responsibilities 
 
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 <strong>Penetration Testing:</strong> manages and conducts internal and external penetration testing. Vets and coordinates 3rd party vendors and the business to deliver high quality penetration and red team testing. Reviews and validates security findings. Works with the business and information security teams to understand security gaps and guide on improvements.<br> </li>
 <li>
<i> </i> 
 <strong>Vulnerability Scanning:</strong> runs and manages vulnerability scans. Maintains and continuously improves the vulnerability scanning infrastructure. Proactively seeks to minimize operational impact through vulnerability scanning process improvement.<br> </li>
 <li>
<i> </i> 
 <strong>Threat Automation:</strong> creates, develops and manages projects and products that continuously simulate new and emerging security threats and threat actors. Writes, validates and augments tools to support our evolving security requirements, use cases and organizational threat goals. Evaluates and implements software with scalability and repeatability in mind, ensuring that security controls are accurate and measurable.<br> </li>
 <li>
<i> </i> 
 <strong>Red Team Intelligence:</strong> plans, develops and manages unique red team projects to support strategic information security goals. Gains deep insight into infrastructure, applications, business, operational and personnel processes to accurately inform on security risks and vulnerabilities. Emulates and applies real world threat intelligence and attacker techniques to effectively test organizational security. Stays informed, and tenaciously pursues applicable attack paths.<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Certifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 OSCP, GIAC GPEN, GWAPT or other Penetration Testing certifications, CISSP, Certified Ethical Hacker (CEH) required. Scripting (Windows/*nix), Bash, Python, Perl or Ruby, Systems Programming, strong knowledge on OWASP Top 10, Mobile Application PenTesting.<br> </li>
 </ul>
 </div>
 </div>
 
 
 <div>
 <div>
<div>
 <div>
 <div>
 <div>
 <div>
 Send CV </div>
 </div>
 <div>
 <div>
 <p>If you meet the job requirements, please send your CV to</p> </div>
 </div>
 <div>
 <div>
 <div></div></div></div></div></div></div></div></div>

Penetration Testing Consultant / Cyber Security Analyst - Red Team

Search 10000+ Security automation engineer jobs near you this October. New roles added regularly across leading industries. Apply today.