The Judge GroupRemote
Senior Security Engineer
United States of America
Full Time
2 weeks ago
$80 - $120 USD
H1B Sponsor Likely
Key skills
Security operationsIncident responseDigital forensicsThreat intelligenceThreat huntingDetection engineeringPythonSQLPandasElasticsearchCyber Kill ChainMITRE ATT&CKAWS EC2AWS S3AWS LambdaAWS RDSAnalyticsAWSEC2LambdaS3RDSMentoring
About this role
The Judge Group is focused on providing innovative solutions in the realm of cybersecurity. They are seeking a Senior Security Engineer to define and execute the vision for threat detection and incident response capabilities while mentoring team members.
Responsibilities:
- Be a key member of a growing Threat Detection & Response (TDR) team
- Define and execute novel approaches to detecting, containing, and mitigating threats and incidents
- Partner with cross-functional teams across the organization to improve overall security, driven by learnings and root cause analysis of investigations and incidents, resulting in the removal of entire classes of problems
- Investigate incidents using digital forensics and data analytics
- Hunt for threats using coding, analytics, and investigative skills
- Build automation and detection models to identify unusual activity and mitigate threats at scale
- Proactively search for threats in corporate and production environments
- Collaborate with engineering teams to build advanced detection solutions and carry out complex investigations
- Identify gaps in infrastructure and improve visibility through logging and detection
- Work closely with cross-functional partners such as Legal, Privacy, and Engineering for efficient, large-scale response
Requirements:
- 5+ years of hands-on experience in investigations, incident response, incident management, digital forensics, threat intelligence, threat hunting, and/or detection engineering
- Strong in Python or other scripting languages; frequent use of SQL and Pandas
- Self-motivated, creative problem-solver able to work independently with minimal guidance
- Ability to lead in complex, ambiguous situations through influence rather than authority
- Calm and collaborative under high-stress, critical situations
- Strong organizational, prioritization, and multitasking skills
- Knowledge of Cyber Kill Chain and MITRE ATT&CK frameworks
- Experience automating security detection and response
- Tools often used include Python, AWS, SQL, and more
- Familiarity with Elasticsearch preferred
- Familiarity with AWS services (EC2, S3, Lambda, RDS) preferred