Security engineer, detection and response
Build and operate detection and response capabilities for AI infrastructure, investigating novel threats across training pipelines, GPU clusters, and model deployments while automating incident response.
• Lead a team of Cyber Security Analysts within the Security Operations Center (SOC)
• Manage and execute hands-on technical detection, analysis, containment, eradication, and remediation to support day-to-day SOC operations.
• Provide guidance and mentorship to improve the skill sets of analysts and ensure the delivery of high-quality analysis and work products.
• Ensure accountability and punctuality of security analysts, holding team members to the highest standards of professionalism.
• Collect and report Cybersecurity metrics to support executive-level briefings on a daily, weekly, and monthly basis.
• Establish and maintain trusted business relationships with the customer and other relevant stakeholders.
• Conduct thorough analysis and quality assurance of the team's work product to ensure accuracy and effectiveness.
Requirements
a. Experience as a Senior Security Analyst leading a team
b. Experience with Security Operations Center, network event analysis and/or threat analysis
c. Experience working as an Incident Responder
d. Knowledge of various security methodologies and technical security solutions
e. Experience analyzing data from cybersecurity monitoring tools
f. Ability to analyze endpoint, network, and application logs
g. Experience tuning and/or configuring SIEM and vulnerability tools
h. Knowledge of common Internet protocols and applications
i. Scripting experience in Linux or PowerShell preferred
j. Bachelor’s degree in Computer Science, Information Technology or equivalent experience.
k. Willing to work in Laguna (Hybrid setup) can start ASAP or less than 30 days
i. Have NIST certificate
Build and operate detection and response capabilities for AI infrastructure, investigating novel threats across training pipelines, GPU clusters, and model deployments while automating incident response.
Leads security operations strategy and engineering, directing high-severity incident response, building cloud-native detection capabilities, and mentoring analysts while partnering with engineering teams to embed security.
Leads enterprise IT security operations, risk management, and GRC, strengthening controls across systems and SaaS while driving vulnerability remediation, audit readiness, and security improvements.
Lead hands-on security operations across monitoring, incident response, and vulnerability management, building scalable capabilities that reduce risk and support enterprise customers and regulated deployments.
Lead security operations across a global environment, managing 24x7 threat monitoring and incident response while developing analysts, improving detection capabilities, and coordinating high-severity incidents.