Role: Cybersecurity Threat Detection & Response Engineer

Duration: Long-Term Contract

Job Summary:

- We are seeking a skilled Cybersecurity Threat Detection & Response professional with strong experience in SIEM, Managed Incident Detection & Response (MIDR/MDR), Threat Modeling, Threat Analysis, and Incident Response.
- The idóneo candidate will be responsible for proactively identifying, analyzing, and responding to cybersecurity threats, while continuously improving the organization's detection and response capabilities.
- The role requires a strong understanding of the evolving threat landscape, security monitoring technologies, attack techniques, and enterprise security architecture.

Key Responsibilities:

Security Monitoring & Detection

- Monitor and analyze security events and alerts generated through SIEM and other security monitoring platforms.
- Investigate suspicious activities and identify potential security incidents.
- Develop, tune, and optimize detection rules, correlation logic, use cases, and alerting mechanisms.
- Reduce false positives and improve the overall effectiveness of security monitoring capabilities.
- Perform log analysis across infrastructure, applications, cloud platforms, identity systems, and security tools.

Managed Incident Detection & Response (MIDR/MDR)

- Perform initial triage, investigation, containment, and escalation of security incidents.
- Analyze indicators of compromise (IOCs), attack patterns, and anomalous behavior.
- Coordinate with internal security, infrastructure, application, and business teams during incident response activities.
- Support incident containment, eradication, recovery, and post-incident analysis.
- Document incidents, investigation findings, root causes, and recommended remediation actions.




- Conduct proactive threat analysis using internal telemetry and external threat intelligence.
- Analyze attacker tactics, techniques, and procedures (TTPs).
- Map threats and detection capabilities against frameworks such as MITRE ATT&CK;.
- Identify emerging threats and assess their potential impact on the organization's environment.
- Develop actionable threat intelligence and recommendations for improving security controls.

Threat Modeling

- Conduct threat modeling exercises for applications, infrastructure, cloud environments, and enterprise solutions.
- Identify potential attack vectors, vulnerabilities, threat actors, and security risks.
- Work with application, architecture, cloud, and engineering teams to embed security considerations into solution design.
- Recommend appropriate security controls and mitigation strategies.
- Support secure architecture and secure-by-design initiatives.

Security Engineering & Continuous Improvement

- Develop and enhance detection use cases based on emerging threats and organizational risks.
- Automate repetitive security operations and investigation activities where possible.
- Participate in threat hunting and proactive identification of previously undetected threats.
- Contribute to improving security processes, playbooks, and incident response procedures.




- Support security assessments and provide recommendations for strengthening detection and response capabilities.

Required Skills & Experience:

- Strong experience in SIEM/Security Event Monitoring and security event analysis.
- Experience with SIEM platforms such as Splunk, Microsoft Sentinel, IBM QRadar, ArcSight, Elastic, or similar technologies.
- Experience in Managed Detection & Response (MDR/MIDR), SOC operations, or Incident Response.
- Strong knowledge of Threat Analysis and Threat Intelligence.
- Hands-on experience in Threat Modeling methodologies.
- Experience investigating security incidents across endpoint, network, identity, cloud, and application environments.
- Knowledge of security logs, network protocols, authentication mechanisms, and common attack patterns.
- Understanding of malware, phishing, ransomware, privilege escalation, lateral movement, and data exfiltration techniques.

Qualifications:

- Bachelor's degree in computer science, Information Security, Cybersecurity, or a related discipline.
- 3–8+ years of relevant cybersecurity experience, depending on the seniority of the role.
- Relevant certifications are desirable, such as CISSP, CISM , GCIH, GCIA, Security+, CEH, Splunk or Cloud Security certifications
- Strong analytical and investigative mindset.
- Ability to correlate information from multiple security tools and data sources.
- Strong understanding of cyberattack techniques and threat actor behavior.
- Ability to work effectively during security incidents and high-pressures situations.
- Strong communication and documentation skills.
- Ability to collaborate with security, infrastructure, cloud, application, and business teams

#J-18808-Ljbffr

📌 Cybersecurity Threat Detection & Response Engineer (Centro)
🏢 THOUGHT BYTE
📍 Centro