Threat Detection Engineer - 2

About the Role

As a Threat Detection Engineer - 2 at TIDE, you'll be responsible for building detection rules and supporting the team in our response life cycle. You'll work hands-on with the SIEM and Security infrastructure, creating log parsers, Infrastructure as Code, detection rules, and automation scripts. Your goal will be to make Tide resilient against the ever-evolving threat landscape.

Key Responsibilities

• Building detection rules and supporting the team in our response life cycle.
• Hands-on work with the SIEM and Security infrastructure, including creating log parsers, Infrastructure as Code, detection rules, and automation scripts.
• Creating novel automations and lambda functions to automate mundane tasks, such as data enrichment and removing phishing emails from employee mailboxes.
• Supporting ongoing threat hunting activities for sophisticated threats across our infrastructure, leveraging threat intelligence and innovative detection techniques.
• Supporting the wider TDR team to build detections across the business, helping to secure Tide by developing business-specific detections.
• Ensuring good quality detections that align with our standards and best practices.
• Identifying opportunities to build or enhance internal tools that streamline threat detection processes, improve data visibility, and increase response efficiency.

Skills & Qualifications

• Strong knowledge of Splunk, Chronicle, or Panther.
• Strong understanding of modern attack and defence techniques, including Cloud (AWS, GCP), SaaS (such as Google Workspace and Okta), and desktop (Windows and macOS) environments.
• Passion for passing on knowledge to fellow colleagues.
• Hands-on attitude and the ability to drive solutions to completion.
• Strong experience in security automation, from writing scripts to creating end-to-end automated workflows.
• Familiarity with SOAR platforms and automating threat detection and response tasks.
• Excellent spoken and written communication skills.
• Experience with writing automation and scripts, with bonus points for having a repository to showcase your work.
• Bachelor's degree in Computer Science or a related field.
• Relevant certifications, such as CompTIA Security+ or CISSP.

What You'll Learn

In this role, you'll have the opportunity to learn and grow in a dynamic and innovative environment. You'll gain hands-on experience with cutting-edge security technologies, including Splunk, Chronicle, and Panther. You'll also develop your skills in security automation, threat hunting, and incident response. As you work with our team, you'll learn from experienced professionals and contribute to the development of our security infrastructure.

Resume Tip

When applying for this role, be sure to highlight your hands-on experience with security automation and threat detection tools. Include specific examples of projects you've worked on, such as creating log parsers or writing automation scripts. Additionally, be sure to emphasize your passion for passing on knowledge to fellow colleagues and your ability to drive solutions to completion.