Job Description
Job Detail
- Own the engineering and tuning of endpoint detection & response, network detection & response platforms
- Drive advancement and growth of detection and automation initiatives
- Build, test, and deploy behavioral detections solutions aligned to MITRE ATT&CK TTPs
- Continuously improve detection efficacy using business context and real-world feedback
- Engineer and optimize detection pipelines in SIEM
- Author comprehensive runbooks, write automation scripts, and build SOAR capabilities to improve response times
- Build and maintain enrichment workflows and automated response playbooks using SOAR
- Create, maintain and manage a library of automated playbooks to address new threats and tactics employed by attackers
- Ensure telemetry normalization, parsing and alert fidelity across data sources
- Operationalize threat intelligence into actionable detection rules, dashboards, and response workflows
- Lead red/blue teaming efforts to test detections against real-world scenarios
- Integrate external and internal threat feeds to strengthen signal correlation
- Apply STRIDE & DREAD methodologies to model risks associated with applications, systems and emerging threats
- Recommend and document compensating controls for identified risks
- Partner closely with Security Operations, Governance Risk & Compliance (GRC), and wider Engineering teams to enhance detection coverage
- Document information security design and architecture
- Mentor and cross-train staff members in the areas of subject matter expertise
- Provide engineering support to Technology Operations implementing industry standard benchmarks and evaluation activities
- Other duties as assigned
Functional Competencies
Strong knowledge of the Cyber Threat landscape and ability to articulate and incorporate understanding of major threat categories, motivations and intent of adversaries - Demonstrated knowledge and practical application of MITRE ATT&CK
- Experience in at least one programming language (Python, Go, C, C ) or deep expertise using low-code automation tools or SOAR Platforms
- Experience building and scaling observability solutions
- Experience with Adversary emulation, continuous detection improvement and operational excellence
- Must be able to collaborate with other teams
- Clear verbal and written communication will be required
Qualifications
Minimum Qualifications
5 years Information Security with 3 years focused on Detection Engineering, including EDR, NDR, SIEM, SOAR tooling - Demonstrated knowledge and practical application of MITRE ATT&CK, STRIDE & DREAD models
- Strong scripting skills (Python, YAML etc
- ) and experience with data parsing and log normalization
- Industry certifications such as CISSP, GCTI, GCIA, GDSA or equivalent preferred
Physical Activities/Requirements
This is a hybrid role based out of our Dublin HQ
Target Base Pay
$115,548 – $144,435/year
Compensation At Patelco
Please note that the salary information is a general guideline only - Patelco Credit Union considers factors such as (but not limited to) scope and responsibilities of the position, candidate’s work experience, education/training, key skills, internal peer equity, as well as market and business considerations when extending an offer
- We offer a competitive total rewards package including a wide range of medical, dental, vision, financial, and other benefits
We Offer
Physical Health:
Exceptional Medical, Dental, Vision, and Life Insurance benefits - Onsite fitness center at HQ and rewards for completing wellness related activities
Financial Health:
Competitive compensation packages with bonus opportunity - 401(k) with 3% Safe Harbor and 5% employer match
- Discounts on loan products
- Tuition reimbursement
Emotional Health:
Employee Assistance Program (EAP) - PTO for part-time and full-time positions
- Paid holidays
Personal Development:
On-the-job training and skills development - Internal transfer opportunities for career growth
- Volunteer work
Flexible work arrangements available for specific positions
Patelco Credit Union is an Equal Opportunity Employer including individuals with disabilities and protected veterans
IND123 ~