Job Description
Essential Functions:
Platform Engineering & Optimization
- Configure, maintain, and optimize assigned security platforms across endpoint, network, web, and identity domains
- Continuously refine policies, detection logic, and configurations to improve signal quality, reduce false positives, and enhance visibility
- Apply platform capabilities to develop and improve detection coverage (e.g., IOA, behavioral detection)
- Ensure platform health, telemetry integrity, and effective coverage across environments
- Evaluate and implement enhancements that improve effectiveness of existing tools before recommending new solutions
Alert Analysis & Investigation
- Analyze alerts and raw telemetry generated by security platforms and determine appropriate action based on context and risk
- Investigate suspicious activity using available data sources, including logs, network traffic, and endp...