Senior Incident Response Engineer

We are looking for a Sr. Incident Response Engineer to join the team at ActiveFence and work within an exciting, dynamic, and fast-moving cloud environment.

You will proactively monitor and review threats and suspicious events, investigate alerts, deep dive, and come up with proper action items and remediation plans. You will investigate multiple internal and external data sources and perform proactive hunting of threat data. As an Incident Response Engineer, you will maintain excellent customer satisfaction through professional, proactive, and personal service. In this role, you will have a unique opportunity to work directly with Fortune 500 on dynamic and fast-moving cloud environments.

Responsibilities

• Investigate security incidents to determine the extent of the compromise of information.
• Design defenses to prevent external attacks or attempts to infiltrate company data, e-commerce, and web-based systems.
• Stay educated on the latest attackers' TTPs (Tactics, Techniques, and Procedures).
• Provide information and updates to external leads, follow up for the next shift, and provide feedback on new security policies and standards.

Requirements:

• A minimum of 5 years of professional experience in incident detection and response in the following areas: Threat Hunting, Digital Forensics, Monitoring and Detection.
• English - Native level.
• Great communication skills.
• Extensive experience working with AWS cloud security methodology; preferably AWS security specialty certified
• Advanced networking knowledge.
• Python, SQL or other similar language knowledge.
• Experience with Linux systems and services
• Incident Response champion, knows how to get people to do the right thing within an event.
• Offensive Techniques and penetration testing knowledge.
• Can create and modify scripts to automate repetitive and mundane tasks.
• Familiarity with enterprise security issues, working at scale.
• System Forensics knowledge; memory forensics, host forensic