Deskripsi Pekerjaan
Are you a passionate cybersecurity professional looking to make a global impact? Trustwave, a leader in Managed Security Services, is seeking a skilled Cyber Threat Engineer to join our elite Threat Detection and Response (TDR) team. In this role, you will be at the forefront of cyber defense, analyzing sophisticated threat vectors and fortifying the digital landscapes of our global clients.
As a key member of the Global Threat Operations unit, you will collaborate with cross-functional teams to proactively identify, investigate, and mitigate complex cyber attacks. This is an exceptional opportunity to work with cutting-edge security technologies and intelligence frameworks in a fast-paced, mission-critical environment. If you thrive on solving complex puzzles and protecting organizations from evolving digital risks, we invite you to advance your career with Trustwave.
Tanggung Jawab
- Develop, maintain, and optimize advanced detection signatures and security content within SIEM and XDR platforms.
- Conduct deep-dive investigations into security incidents and perform root cause analysis on identified threats.
- Collaborate with threat intelligence analysts to integrate global threat feeds into operational workflows.
- Proactively hunt for indicators of compromise (IoCs) and emerging attack patterns across diverse client infrastructures.
- Automate security orchestration and response (SOAR) playbooks to streamline incident resolution and reduce MTTD/MTTR.
- Participate in 24/7 rotational security operations to ensure continuous monitoring and rapid response.
- Mentor junior security analysts and contribute to the development of internal security training materials.
Kualifikasi
- Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience.
- 3+ years of experience in Security Operations (SOC), Threat Intelligence, or Incident Response.
- Proficiency in security tools such as SIEM (e.g., Splunk, Sentinel, QRadar) and EDR/XDR platforms.
- Strong understanding of MITRE ATT&CK framework and cybersecurity threat landscapes.
- Scripting proficiency in Python, PowerShell, or Bash for security automation tasks.
- Excellent analytical and problem-solving skills with the ability to perform under high-pressure scenarios.
- Relevant industry certifications (e.g., GCIH, GCIA, CISSP, CEH) are highly preferred.