Senior Security Response Engineer

Business Area:

IT

Seniority Level:

Mid-Senior level

Job Description: 

At Cloudera, we empower people to transform complex data into clear and actionable insights. With as much data under management as the hyperscalers, we're the preferred data partner for the top companies in almost every industry.  Powered by the relentless innovation of the open source community, Cloudera advances digital transformation for the world’s largest enterprises.

As a Senior Security Response Engineer at Cloudera, you will be entrusted with fortifying the security posture of our organization. Your responsibilities will encompass a wide spectrum of threat detection, security analysis, and incident response activities. This role requires not only a deep technical understanding of cybersecurity but also strong problem-solving abilities, effective communication skills, and the capacity to work both independently as well as collaboratively in a team environment.

In this dynamic and critical role within our Incident Response Function, staff will be part of a team responsible for monitoring, detecting, and responding to cybersecurity threats in real-time. The nature of our work requires a 24/7 operational capability, and as such, this position involves a shift schedule to ensure continuous vigilance and response readiness. The role is structured to work in various shift patterns, including nights, on-call, weekends, rotations, and holidays, with the possibility of extended hours during high-priority incidents. The ability to adapt to a changing schedule and maintain a high level of performance and attention to detail is essential. Our shift coverage is designed to balance operational requirements with employee well-being, as well as providing opportunities for further skills development.

As the Senior Security Response Engineer, you will:

• Proactively monitor and respond to security alerts and events from various sources, including SIEM, Cloud Security Platforms, EDR, and other technologies.

• Conduct in-depth analysis of security incidents to determine the root cause and impact, and recommend appropriate mitigation strategies.

• Collaborate with cross-functional teams to investigate and respond to security incidents, including documenting findings and actions taken.

• Develop and maintain incident response playbooks, processes, standards, procedures, and workflows to streamline response efforts and improve the organization's security posture.

• Participate in threat hunting activities to identify advanced threats and vulnerabilities.

• Identify, document, and research threat intelligence findings and reports.

• Independently complete tasks and projects as they arise.

• Collaborate with cross-functional teams on various cybersecurity initiatives.

• Provide mentorship and guidance to junior analysts and engineers.

• Assist in the evaluation and implementation of security tools and technologies.

• Stay up-to-date with emerging threats, vulnerabilities, and industry best practices.

• Continuously pursue forward thinking and unique solutions to security challenges.

 

We’re excited about you if you have:

• Robust analytical mindset and self-starter with a genuine interest in forward-thinking cybersecurity

• Relevant educational degree (Information Security / Information Assurance / Cybersecurity)  or equivalent cybersecurity work experience (3-5 years)

• Three or more years of technical experience in providing large enterprise incident response and/or threat hunting

• Proficiency with security technologies, including SIEM, EDR, and cloud security systems.

• Strong understanding of cyber threats, attack techniques, and incident response methodologies.

• Must be able to independently analyze and respond to alerts and security incidents, including but not limited to triage, root cause analysis, and response coordination. 

• Proficiency in analyzing and responding to threats on Linux-based systems

• Excellent problem-solving and communication skills.

• Ability to work effectively both independently and as part of a team.

• Proficiency in analyzing and responding to threats in one or more cloud/containerized environments (AWS/GCP/Azure/Kubernetes/Docker)

• Knowledge of threat intelligence methodologies

You may also have: 

• Supporting certifications such as EC-Council (CND/C|CSE), Comptia (CYSA+/CASP+), OffSec (OSCP/OSDA/OSTH/OSIR) or GIAC (GCIA/GCIH/GDAT/etc.)

• Experience in SOAR or Cloud/Linux digital forensics

• Experience with data analytics leveraging machine and/or deep learning

What you can expect from us:

• Generous PTO Policy 

• Support work life balance with Unplugged Days

• Flexible WFH Policy 

• Mental & Physical Wellness programs 

• Phone and Internet Reimbursement program 

• Access to Continued Career Development 

• Comprehensive Benefits and Competitive Packages 

• Paid Volunteer Time

• Employee Resource Groups

EEO/VEVRAA

#LI-ZY1