Back to jobs
Job Description
- Analyze real-time security events across endpoint, network, and cloud environments, integrate AI-infused alert summarization platforms to rapidly categorize and prioritize high-severity alerts.
- Leverage generative AI security assistants (such as Google Security Operations Gemini) to translate natural language threat hypotheses into advanced detection queries (YARA-L), accelerating threat hunting and triage.
- Conduct host and network forensic analysis to support incident response efforts, applying AI analytics to correlate disparate signals, understand attacker activity, and assess customer impact.
- Execute basic static and dynamic analysis of suspicious files, utilize AI-driven code explainers and de-obfuscation models to identify malicious capabilities rapidly (e.g., identifying GOOTLOADER JavaScript or CORNFLAKE.V3 backdoors).
- Isolate compromised hosts and stop lateral movement or ransomware propagation using both manual controls and AI-driven automated response playbooks.