Senior CSIRT Engineer

Job not on LinkedIn

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Vultr

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2014

🤖 Artificial Intelligence

🤝 B2B

🔧 Hardware

💰 $329M Debt Financing - Vultr on 2025-06

Artificial Intelligence • B2B • Hardware

Vultr is a global cloud infrastructure provider offering on-demand virtual machines, bare-metal servers, GPU-accelerated instances, managed databases, object and block storage, Kubernetes, and networking services. The platform emphasizes AI and HPC workloads with a broad selection of AMD and NVIDIA GPUs, fast networking, and 32+ data center regions, plus a marketplace of deployable apps and developer-friendly APIs. Vultr targets developers and businesses seeking affordable, scalable, and compliant cloud compute and storage alternatives to hyperscalers.

📋 Description

• Engineer, tune, and maintain detection rules and analytics in the SIEM and EDR platforms • Administer SIEM platform health, parser configuration, log source onboarding, and data pipeline optimization. • Design and build SOAR playbooks and automated response workflows to streamline triage, enrichment, and containment. • Develop and maintain integrations between security tools (SIEM, EDR, SOAR, SEG, TIP, DLP, ticketing) • Map detection coverage to MITRE ATT&CK to identify and close gaps • Identify and drive improvements to security visibility across the environment, including new log sources, enrichment opportunities, and telemetry gaps • Assist with investigation of security events, from alert through remediation • Assist with conducting threat hunts across organizational telemetry • Assist incident response with log analysis, artifact collection, and containment • Manage EDR platform coverage, sensor health, and policy configuration • Coordinate with Threat Intelligence to translate intel into deployed, actionable detection logic • Coordinate with Security Engineering on infrastructure integrations and log pipeline architecture • Document detection logic, automation workflows, and operational procedures

🎯 Requirements

• Minimum of 5 years experience in detection engineering, SIEM engineering, SOAR engineering, Security Operations, or a closely related role • Hands-on SIEM experience at an engineering level: rule authoring, parser development, log source integration, platform administration. • Experience building SOAR workflows and automated response playbooks. • Experience with EDR platforms, including policy configuration, telemetry analysis, and live response. • Demonstrated proficiency in PowerShell, Bash, Python, common Query Languages (FQL, KQL, EQL, LEQL, MQL, etc) and YARA, SIGMA, and CAPA rules. • Experience conducting security investigations, threat hunting, and incident response • Solid understanding of attack techniques and detection logic mapped to MITRE ATT&CK • Proficiency with Linux, MacOS, and Windows.

🏖️ Benefits

• Excellent Medical Benefits w/ 100% company-paid premiums for employee only plan + 100% company-paid dental & vision premiums • 401(k) plan that matches 100% up to 4% with immediate vesting • Professional Development Reimbursement of $2,500 each year • 11 Holidays + Paid Time Off Accrual + Rollover Plan + take your birthday off • Commitment matters to Vultr! Increased PTO at 3 year & 10 year anniversary + 1 month paid sabbatical every 5 years + Anniversary Bonus each year • $500 first year remote office setup + $400 each following year for new equipment • Internet reimbursement up to $75 per month • Gym membership reimbursement up to $50 per month • Company-paid Wellable subscription