Incident Responder

📋 Description Lead investigations end-to-end and manage MSSP escalations. Conduct proactive threat hunts across cloud and endpoints. Build and tune detection content in Microsoft Sentinel and cloud stack. Develop and improve enrichment and response workflows to speed up response. Apply AI-assisted approaches to triage and automation. Analyze logs and telemetry to reconstruct attacker activity. 🎯 Requirements Proven IR and security operations in cloud-native environments (Azure & AWS). Hands-on expertise with Microsoft Sentinel or equivalent SIEM for detection engineering. Experience working with MSSP—managing escalations, feedback, and coverage gaps. Threat hunts and automation, including SOAR playbooks and scripting. Strong knowledge of attacker TTPs, MITRE ATT&CK, cloud security, and identity (AD/Entra ID). Excellent communication and ability to work independently and in a team. 🎁 Benefits Remote-first culture. Flexible PTO and self-care days. Parental leave. Comprehensive health coverage (including dependents). Home office setup stipend. Learning stipend for professional development.