Lead Cyber Threat Investigator

- I participate and lead in incident response operations as an expert during high-severity incidents, recommending remediation actions based on threat analysis. - I oversee the development of detailed reports on findings and remediation actions, ensuring effective communication with senior management and relevant stakeholders. - I identify tactics, techniques, and procedures used by threat actors and develop countermeasures (like custom signatures and correlation logic) to detect and/or mitigate adversary activities. - I build, fine-tune, and monitor AI-assisted detections (such as machine learning jobs) to reveal adversary movements within our client environments. - I conduct proactive cloud-based threat hunting across our subscribers' networks, identifying and investigating potential threats before they can cause harm or disruption. - I leverage new and existing cybersecurity tools and methodologies to detect, analyze, and mitigate cybersecurity threats, integrating threat intelligence into our sensing infrastructure. - I collaborate with both internal and external stakeholders—including IT, network, and security teams—to enhance the overall cybersecurity posture of subscriber systems. - I keep up-to-date with the latest cybersecurity threats, trends, and technologies, offering recommendations to improve detection and response capabilities. - I develop and provide cybersecurity training for the threat hunting team, network defense team, and other relevant personnel to enhance their understanding and response capabilities. - As a senior team member, I serve as a mentor, fostering professional growth and nurturing a culture of continuous learning and improvement.