Security Operations Engineer - FalconX

About the role

At FalconX, the Security Operations Engineer will play a critical role in safeguarding the company's infrastructure by monitoring and responding to security incidents. This position involves analyzing security alerts and conducting forensic investigations to identify and mitigate threats.

The ideal candidate will work with a team focused on improving security operations through proactive threat hunting and automation. Success in this role means effectively detecting sophisticated cyber threats and continuously enhancing the organization's security posture.

Skills that matter here

• Cybersecurity: This role requires a strong foundation in cybersecurity principles to protect FalconX's infrastructure.
• Threat Hunting: The engineer will engage in proactive threat hunting to uncover advanced cyber threats.
• Python: Scripting in Python will be essential for automating threat detection and analysis.
• PowerShell: PowerShell will be used to develop automation scripts for security operations.
• Bash: Bash scripting will help in automating various security tasks.
• Cloud Security: Understanding cloud security is crucial as the role involves monitoring cloud environments.

Who this role suits

• A person with at least three years of experience in security operations or threat hunting.
• Someone who thrives in a fast-paced environment and is skilled in collaboration.
• An individual with strong analytical skills and a deep understanding of threat detection methodologies.
• A candidate who is proficient in scripting and automation to enhance security operations.

From the employer

• Monitor, detect, and respond to security incidents across on-premise and cloud environments.
• Analyze security alerts from security tools to identify potential threats.
• Conduct forensic investigations and deep-dive analysis of security events to identify trends, attack techniques, and areas for improvement.
• Conduct proactive threat hunting across endpoint, network, and cloud environments to identify sophisticated cyber threats.
• Analyze security logs, behavioral patterns, and anomalies to detect indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs).
• Investigate security incidents, perform forensic analysis, and provide actionable recommendations for mitigation and remediation.
• Develop and refine threat hunting methodologies, leveraging frameworks like MITRE ATT&CK and the Cyber Kill Chain.
• Automate threat detection and analysis using scripting languages such as Python, PowerShell, or Bash.
• Continuously monitor emerging threats, vulnerabilities, and attack trends to improve detection and response strategies.

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field (or equivalent experience).
• 3+ years of experience in security operations, threat hunting, or a similar cybersecurity role.
• Experience working with log data for detection and response (Cloud, EDR, Network, and more).
• Experience developing and deploying effective detection rules (Yara, Sigma, SQL based rules, Network, etc.).
• Strong understanding of network security monitoring, packet analysis, and log correlation.
• Deep understanding of advanced threat detection methodologies and threat intelligence.
• Proficiency in analyzing attacker tactics, techniques, and procedures (TTPs) based on frameworks like MITRE ATT&CK.
• Proficiency in scripting and automation for security operations (Python, PowerShell, or Bash).
• Understanding of endpoint security, identity management, cloud security, detection engineering, vulnerability management, incident response, and threat intelligence.
• Excellent communication skills and ability to work collaboratively in a fast-paced environment.