Security Engineer

Confidential Company

Perform customer asset onboarding, including asset inventory validation and Crown Jewel identification (CIA-based).

Define and implement log baselines for various device types and ensure proper log ingestion.

Configure and integrate customer environments with SIEM platforms, including tenant setup, security profiling, and log retention.

Develop, validate, and fine-tune security use cases.

Conduct 24x7 monitoring of customer environments and handle incident alerting (TTA).

Perform incident analysis (TTN, TTDN) and manage complete ticket lifecycle (TTC).

Prepare and present daily, weekly, monthly, and ad-hoc reports to stakeholders.

Review logs, optimize use cases, and update SOP documentation.

Generate and share Threat Intelligence reports.

Perform daily health checks, backup validation, and administrative activities for CDC tools.

Handle troubleshooting, firmware upgrades, and operational maintenance.

Update IOC feeds and enhance or create new detection use cases.

Lead incident response and forensic investigations.

Conduct root cause analysis, post-incident reviews, and malware analysis.

Perform threat hunting using MITRE ATT&CK framework.

Analyze threat actor TTPs and integrate findings into detection strategies.

Collect, analyze, and operationalize threat intelligence.