Partner with engineering teams to centralize security logs across all environments.
Design, test, and tune alert scenarios and rules to detect anomalies.
Operationalize CTI and integrate intel into detection pipelines.
Conduct deep-dive investigations into alerts; map root causes and impact.
Lead incident lifecycle from containment to remediation; coordinate crisis responses.

🎯 Requirements

3+ years in SOC, IR, or Threat Hunting in cloud-native environments.
Strong knowledge of MITRE ATT&CK and protecting high-value infrastructure.
Experience writing KQL/Splunk queries and building SIEM detections.
Ability to write Python or Go automation scripts for security APIs and automation.
Proven experience leading or participating in incident response efforts.

🎁 Benefits

Competitive salary and equity package
Health insurance
Transportation allowance
Meal vouchers
Private pension plan
Generous parental leave policy

Apply on employer's website

This employer gathers applications via their own applicant tracking system.

You will be redirected to an external application form.

Share job

Meet JobCopilot: Your Personal AI Job Hunter

Automatically Apply to Engineering Jobs. Just set your preferences and Job Copilot will do the rest — finding, filtering, and applying while you focus on what matters.

Activate JobCopilot