Security & IT

This role involves owning the overall strategy and catalog for security detection use cases across identity, cloud, and endpoint threats while building and improving detections using modern SIEM capabilities. The position requires leading incident response from initial escalation through closure, managing relationships with managed security providers, and establishing telemetry requirements for investigation. Additionally, the role focuses on automating investigation workflows, incorporating threat intelligence, and providing functional direction to SOC analysts within a remote, distributed security organization.