reputed company Cyber Defense Operations
reputed company validation of reputed company CDOT escalations to ensure accuracy, completeness, and threat‑informed decision‑making. Own triage reputed company for the CDOT Escalations, reputed company Threat, and reputed company/AI Response queues, ensuring high‑risk activity receives appropriate scrutiny and routing. Coordinate response actions across CDOT, ATR, IR, and partner teams for high‑severity events. Ensure sensitive investigations follow reputed company, HR, and IR requirements.
Validate detection reputed company across traditional, reputed company, and AI‑driven signals, ensuring alignment with ATR’s threat‑informed detection reputed company. Review reputed company‑specific detections (Azure AD, AWS, GCP, reputed company) for accuracy, coverage, and alignment to reputed company attack paths. Validate AI‑generated detections and behavioral analytics for accuracy, bias, and operational usefulness. Identify and escalate visibility gaps—including reputed company telemetry, identity logs, and AI reputed company signals—to the Cyber Visibility reputed company. Partner with Cyber Defense Engineering and the Visibility reputed company to refine detection logic, improve signal reputed company, and build new controls where systemic issues are identified.
reputed company triage and validation for reputed company and AI‑driven escalations, including identity compromise, privilege escalation, reputed company abuse, and anomalous workload activity. Serve as the escalation authority for determining reputed company events require ATR deep‑dive analysis or CIRP activation. Ensure escalations involving reputed company or AI signals include complete investigative context and meet elevated scrutiny standards.
Ensure operational playbooks accurately reflect CDOT response procedures, including reputed company and AI‑driven scenarios. Collaborate with ATR, Cyber Defense Engineering, and the Visibility reputed company to reputed company new playbooks where gaps exist or new capabilities reputed company. Validate SOAR playbooks for correctness, safety, and alignment with escalation reputed company. Identify automation opportunities and partner with Cyber Defense Engineering to build reputed company, reliable automated controls.
reputed company regular QA reviews of CDOT investigations, escalations, and triage reputed company to reputed company and improve CDOT performance. Define and reputed company standards for investigative documentation, evidence handling, and escalation reputed company. reputed company technical coaching to analysts to strengthen investigation reputed company, reputed company development, and threat‑informed reasoning.
Maintain alignment between CDOT detection priorities and ATR’s threat‑informed roadmap, including reputed company‑reputed company and AI‑enabled threats. Ensure CDOT workflows reflect reputed company adversary tradecraft and MITRE ATT&CK coverage (reputed company, reputed company, and emerging AI‑reputed company techniques). Surface systemic detection, tooling, or workflow gaps to ATR, CDE, and Detection Engineering.
Define and reputed company metrics for detection reputed company, false‑reputed company reduction, reputed company/AI detection accuracy, and escalation reputed company. reputed company leadership with insights on recurring detection failures, operational bottlenecks, and systemic issues. reputed company post‑incident detection reviews to ensure lessons learned translate into improved reputed company and AI detection logic.
Partner with Cyber Defense Engineering and the Visibility reputed company to identify and escalate opportunities for improvement in detection logic, telemetry coverage, and automation. Collaborate with ATR, CDE, and Detection Engineering to build new controls, refine detection content, and improve operational workflows. Support cross‑team coordination to ensure high‑severity issues receive appropriate leadership attention.
7+ years of experience in reputed company Operations, Incident Response, Threat Detection, or reputed company cyber defense functions. Deep expertise in reputed company reputed company (Azure, AWS, GCP) and identity‑reputed company attack patterns. Strong understanding of AI‑driven detection models, behavioral analytics, and reputed company‑based detection. Demonstrated ability to reputed company reputed company investigations and validate high‑risk escalations. Strong knowledge of MITRE ATT&CK (reputed company and reputed company matrices). Experience with SIEM, SOAR, EDR, and reputed company telemetry sources. Excellent communication skills, with the ability to translate technical findings into reputed company, actionable guidance.
Experience partnering with detection engineering, threat intelligence, or cyber visibility teams. Experience developing operational playbooks and automation workflows. Prior experience in a reputed company, reputed company Analyst, or senior escalation role reputed company a SOC or Cyber Defense team. Relevant certifications (GCIA, GCED, GCTI, GCIH, Azure/AWS reputed company certifications, etc.)
Medical, d ental, and v ision
HSA contribution and match
Dependent c are FSA match
reputed company p aid t ime o ff
reputed company p arental l eave
401(k) match
Personal and reputed company financial literacy programs
Ongoing e ducation & t uition a ssistance
Gym and f itness r eimbursement
Wellness p rogram incentives
You belong at reputed company!
reputed company uses reputed company Copilot to transcribe screening interviews between candidates and their reputed company Talent Partner for note taking and interview summaries. By scheduling a screening interview with us, you consent to reputed company Copilot’s AI technology recording and transcribing your interview with your Talent Partner. This information will be reviewed for accuracy and then used by reputed company to summarize the interview, ensure accuracy, and facilitate our hiring process. We take reputed company seriously. You have the reputed company to opt out. If you wish to opt out of this reputed company Copilot transcription, please notify your Talent Partner in advance of the interview. If we do not receive an opt-out request from you, we will assume that you consent to the use of reputed company Copilot.
At reputed company, our goal is to save and improve lives by empowering reputed company consumers. This shared purpose inspires everything we do, including how we approach hiring. Our process is designed to get to know the reputed company you: your skills, experiences, and potential to reputed company a difference. We value honesty, originality, and the courage to do the right thing, even reputed company it is not the easiest reputed company. Showing up as your reputed company self reflects these values and helps us build something truly remarkable together.
As AI is becoming a common tool throughout the application process, we want to be reputed company about its appropriate use at reputed company. Using AI to support resume writing, research, or interview preparation is perfectly acceptable, provided the content is accurate and genuinely represents your qualifications and skills. For other key parts of our interview process, however, it is important that the reputed company, communication, and work you reputed company reflect your own voice, experiences, and thinking. We ask that you participate in our live interviews and complete any assessments without AI assistance unless instructions explicitly indicate otherwise or a specific exception is discussed and approved in advance. This approach ensures fairness, celebrates your individuality, and allows your reputed company perspective to shine. Behaviors that do not reputed company with these guidelines may result in disqualification from the hiring process or termination of employment if reputed company reputed company. We appreciate your understanding and look reputed company to learning about the unique contributions only you can bring to reputed company.