Information Security Engineer – Incident Response & Threat Intelligence

About the role

The Information Security Engineer will lead our Incident Response and Threat Intelligence initiatives, helping to detect, investigate, contain, and remediate sophisticated cyber threats. You will work closely with Security, Infrastructure, and Engineering teams to improve threat visibility and strengthen our defensive posture.

Key responsibilities

• Lead technical response to cybersecurity incidents across endpoints, cloud, and network environments.
• Perform forensic investigations, root‑cause analysis, and develop containment, eradication, and recovery strategies.
• Maintain and improve incident response playbooks, runbooks, and support tabletop/red‑blue‑purple team exercises.
• Collect, analyze, and operationalize threat intelligence from internal and external sources using frameworks such as MITRE ATT&CK.
• Produce tactical, operational, and strategic intelligence reports and manage IOC lifecycles.
• Develop and tune detection rules, integrate threat intelligence into SIEM, EDR, SOAR, and cloud platforms.
• Automate detection use cases, improve logging, telemetry, and forensic readiness.
• Evaluate new security technologies and recommend improvements.

Required profile

• 3‑5 years of experience in information security, cybersecurity, or incident response.
• Bachelor’s degree in a related field.
• Relevant certifications (e.g., GIAC GCIA, GCIH, GCFA, GCTI, CISSP, Security+).
• Fluent in English (reading, writing, speaking).

Required skills

• Incident response and forensic investigation.
• Threat intelligence collection and analysis.
• SIEM, EDR, and other forensic tools.
• Scripting/automation with Python, PowerShell, or Bash.
• Log analysis on Windows, Linux, and cloud platforms.
• Cloud security (AWS, Azure, GCP).
• MITRE ATT&CK framework knowledge.
• Malware analysis techniques.
• Detection rule development and threat‑intel platform integration.