Triage and investigate incidents across SIEM, EDR, network, identity, and cloud telemetry.
Contain, eradicate, and communicate incidents under senior guidance.
Contribute to root cause analysis to produce durable detections and playbooks.
Proactively hunt threats across enterprise and cloud telemetry.
Maintain IR playbooks and runbooks; participate in drills.
Tune detection/response tooling (SIEM, EDR, SOAR) in both environments.

🎯 Requirements

Minimum 1 year in Security Operations.
Hands-on with SIEM and EDR.
Developing ability to write/run KQL queries.
Practical experience with coding agents and/or LLM tooling.
US citizen or US lawful permanent resident; able to work Bellevue, WA office 3 days/week.
Familiar with NIST SP 800-53/61 or willing to learn.

🎁 Benefits

Flexible hybrid/remote work options.
Rolling applications process with no fixed deadline.
Inclusive, diverse workplace with accommodations on request.
Privacy policy and equal opportunity commitments.

Apply on employer's website

This employer gathers applications via their own applicant tracking system.

You will be redirected to an external application form.

Share job

Meet JobCopilot: Your Personal AI Job Hunter

Automatically Apply to Engineering Jobs. Just set your preferences and Job Copilot will do the rest — finding, filtering, and applying while you focus on what matters.

Activate JobCopilot