Responsible for implementing, configuring, and maintaining advanced security detection and response mechanisms across on-premise and cloud environments, including AWS, Azure and Google Cloud; provide support with IOC-based threat hunting, incident response, and log source integration; leverage customized OS configurations and Regex (Regular Expressions) with Splunk SIEM tools for log correlation and analysis; deploy and maintain email security solutions including Proofpoint, FireEye EX, Microsoft Defender, and Microsoft O365, endpoint detection and response platforms including CrowdStrike, and Microsoft Defender for Endpoint, and network security tools including FireEye NX, Palo Alto, FortiNDR, Netskope Proxy, and Palo Alto Panorama Firewall; develop, tune, and automate detection rules using the MITRE ATT&CK Framework for threat detection creation, gap assessment, and analysis; lead incident response operations, including investigation, root cause analysis, and remediation, while utilizing PowerShell and Kubernetes for automation and forensic analysis; build and troubleshoot playbooks within SOAR (Security Orchestration, Automation, and Response) solutions to enhance operational efficiency; maintain comprehensive documentation of detection configurations, response procedures, and investigations, while continuously monitoring emerging threats and vulnerabilities; and utilize and apply knowledge of Active Directory, Wiz, and StrikeReady to strengthen overall cybersecurity posture and safeguard corporate assets through proactive detection engineering and threat intelligence–driven defense strategies.
Location: Southfield, Michigan and multiple undetermined worksites throughout the US;
Salary: $138,320 per year;
Education: Masters’s – Computer Science, Computer Engineering, Information Technology, Computer Information Systems, or in a related field of study (will accept equivalent foreign degree);
Training: None;
Experience: Two (2) years in the position above, as a Sr. Cyber Security Analyst, as a Senior Analyst – IT Security, as a Security IT Analyst, or in a related occupation;
