Senior Associate Manager – Threat Intelligence, DFIR Specialist

3 hours ago

Apply Now

Receive Emails with Similar Jobs

Sutherland

WebsiteLinkedInAll Job Openings

B2B • Artificial Intelligence • SaaS

Sutherland is a global company specializing in digital transformation and business process outsourcing services. They leverage advanced technologies such as Artificial Intelligence, automation, and cloud engineering to drive digital performance and optimize critical business operations. Sutherland offers a variety of services including digital CX, enterprise technology solutions, and intelligent automation across multiple industries such as banking, healthcare, and telecommunications. Their focus is on delivering measurable outcomes, enhancing customer experiences, and enabling business agility through innovative digital solutions.

10,000+ employees

Founded 1986

🤝 B2B

🤖 Artificial Intelligence

☁️ SaaS

💰 $300M Secondary Market on 2014-10

📋 Description

• Lead the end-to-end incident response lifecycle, including detection, analysis, containment, eradication, and recovery. • Analyze and investigate a variety of attack vectors, such as: Identity attacks include credential abuse, privilege escalation, and MFA bypass. • Web Attacks: SQL injection, cross-site scripting (XSS), remote code execution. • Network Attacks: DDoS, lateral movement, traffic manipulation. • Cloud Threats: IAM misconfigurations, exposed services, container security vulnerabilities. • Work closely with SOC analysts, threat intelligence teams, forensics, and engineering groups during and after security incidents. • Conduct comprehensive investigations to determine the root cause of incidents and provide actionable remediation recommendations. • Document all incident response procedures and lessons learned. Contribute to the continuous improvement of our detection and response capabilities. • Participate in threat hunting and purple team exercises to enhance overall security preparedness.

🎯 Requirements

• A minimum of 5 years of hands-on experience in cybersecurity incident response or security operations. • Proven expertise in investigating and mitigating incidents across one or more areas: identity, web, network, or cloud. • Proficiency with SIEM, EDR, and SOAR tools (e.g., Splunk, Sentinel, CrowdStrike). • Experience in hybrid or cloud-first environments (AWS, Azure, or GCP). • Strong understanding of frameworks and methodologies such as MITRE ATT&CK, the cyber kill chain, and threat modeling. • Excellent written and verbal communication skills, with the ability to document and convey technical details clearly to both technical and non-technical stakeholders. • Industry certifications include GCIH, GCFA, GNFA, GCIA, or relevant cloud security certifications (AWS, Azure, or GCP). • Experience with scripting or automation (e.g., Python, PowerShell, Bash). • Exposure to advanced threat hunting and threat intelligence practices.

🏖️ Benefits

• All your information will be kept confidential according to EEO guidelines.