IR Engineer

Were looking for a hands-on incident response expert thats passionate about investigating real threats, building scalable detections, and improving automation across modern cloud-native environments. This is a high-impact role within our security group, ideal for someone who thrives on both investigation and building long-term solutions. In your day-to-day, youll:Investigate complex security incidents in cloud (AWS/GCP), containerized (Kubernetes), and endpoint environmentsDesign and maintain detection rules and anomaly-based logic to identify emerging threats in production systemsAutomate forensic evidence collection and response actions across diverse platforms and servicesCollaborate with SOC analysts, Security Architects, and Engineering teams to improve detection coverage and data visibilityLead incident retrospectives and document technical findings, response steps, and process improvementsDevelop and maintain investigation playbooks, chain-of-custody protocols, and sprintדרישות:4+ years of hands-on experience in incident response or security operationsProficiency in Python for scripting, automation, and tool developmentStrong knowledge of cloud platforms (AWS and/or GCP) and container technologies (Kubernetes)Experience with detection engineering, threat hunting, and automated response toolingFamiliarity with scripting or automation tools for investigation and remediationExcellent written and verbal communication skills in EnglishAbility to work effectively with global teams across time zones. המשרה מיועדת לנשים ולגברים כאחד.