Senior Cybersecurity Engineer

Incident Response & Security Operations

• Serve as the primary technical responder for security incidents across the enterprise environment, including IT and OT-adjacent systems.
• Lead triage, classification, and prioritization of security incidents; execute containment, eradication, and recovery actions with full documentation.
• Perform intermediate to advanced digital forensics - artifact collection, memory and disk analysis, log correlation, timeline reconstruction, and chain of custody handling.
• Monitor, analyze, and investigate alerts and events across SIEM, EDR (e.g., SentinelOne), and network monitoring platforms.
• Operating systems (Windows/Linux)
  
• Produce detailed technical incident reports and contribute to executive-level post-incident summaries.
• Develop and maintain incident response playbooks and response procedures.

Vulnerability Management

• Own the vulnerability management lifecycle: coordinate scanning, track findings, drive prioritization based on risk and asset criticality, and follow up with infrastructure and application teams on remediation.
• Monitor for emerging threats and newly disclosed vulnerabilities; assess applicability to the environment and communicate urgency to relevant stakeholders.

Security Program Contribution

• Support the definition and enforcement of security controls across infrastructure, endpoints, identity, and cloud environments.
• Participate in the administration and optimization of security tooling (SIEM, EDR, endpoint management, vulnerability scanners).
• Contribute to the development and maintenance of security documentation, standards, and operational procedures.
• Work alongside infrastructure, network, and software development teams on security requirements for projects and changes.
• Contribute to security awareness activities and foster a security-conscious organizational culture.