Cyber Defense Engineer

About the role

BeyondTrust is seeking a Cyber Defense Engineer to protect its enterprise infrastructure and product integrity. You will work with a team of threat hunters, incident responders, and detection engineers, leveraging AI‑driven tools to enhance detection, triage, and response workflows.

Key responsibilities

• Monitor and triage security alerts across SIEM, EDR, and CSPM platforms for corporate and product environments.
• Lead or participate in incident response engagements, including evidence collection, forensic analysis, and post‑incident reporting.
• Design, implement, and tune detection rules, mapping coverage to MITRE ATT&CK and reducing false positives.
• Integrate AI‑driven tools into daily workflows, creating prompts and pipelines that augment analyst capabilities.
• Maintain operational documentation, on‑call rotation, and track metrics such as MTTD and MTTR.

Required profile

• 4+ years of experience in a SOC, security operations, or incident response role.
• Strong understanding of MITRE ATT&CK, network protocols, and endpoint behavior.
• Experience with at least one SIEM platform and familiarity with writing detection queries.
• Comfort using AI systems (LLM‑based assistants, copilots) as part of security workflows.
• Excellent written communication for technical and non‑technical audiences.

Required skills

• SIEM platforms
• EDR platforms
• Cloud IaaS environments
• AI‑driven analysis tools
• MITRE ATT&CK framework