Cloud Detection Engineer

March 7

🌴 South Carolina – Remote

Although this job is listed in South Carolina, this company may be open to hiring remote in other states.

⏰ Full Time

🟢 Junior

🟡 Mid-level

👷🏻‍♀️ Engineer

🚫👨‍🎓 No degree required

Apply Now

Receive Emails with Similar Jobs

Soteria - Security Solutions & Advisory

WebsiteLinkedInAll Job Openings

Soteria is a client-focused organization providing expert advisory, consulting, and tailored security solutions to help prevent and respond to cybersecurity incidents. Established in 2014 and based in Charleston, South Carolina, Soteria offers a range of services including managed detection and response, domain watch, incident response, offensive security services, and security assessments. The company prides itself on defending businesses against cyber crime 24/7 and delivering tailored solutions that enhance security operations. Soteria's team brings extensive experience from various industries, state governments, and federal intelligence communities, emphasizing a belief that 'Security is for Everyone.

Incident Response • Forensics Analysis • Data Analytics • Threat Management • Hunt Operations

11 - 50 employees

🔒 Cybersecurity

🏢 Enterprise

💰 $2.5M Seed Round on 2018-02

📋 Description

• Join Detection & Response Team, automate and secure detection processes. • Responsible for development of security tooling with a focus on cloud platforms. • Tune existing rules and develop additional logic with DART. • Support MDR consultants to monitor, investigate, and respond to alerts. • Engage in digital forensics and incident response matters. • Mentor and train team members to improve capacity and capability. • Maintain competence in security trends through self-study and events.

🎯 Requirements

• 2+ years of detection engineering or other relevant experience • Experience with cloud security APIs and telemetry for AWS, GCP, and Azure. • Thorough knowledge of common tactics, techniques, and procedures used by threat actors • Knowledge of forensic artifacts available on Windows, Linux, Unix, and MacOS • Proficiency with detection-as-code pipeline - GitHub, Jira, Elastic, etc. • Experience managing SIEM tools and as it relates to searching and extracting relevant data for incident investigations and feeding information into and out of such a platform. • Programming/Scripting experience, preferably working with Python3 and PowerShell. • Experience with Panther, Lima Charlie, Tines, SentinelOne, and/or Windows Defender is a strong plus. • Willingness to participate in an on-call rotation that includes work as necessary outside of business hours. • Strong written and verbal communication skills, with a focus on empathy and patience with clients that may be combative or experiencing extreme stress.