Start searching
Back to Jobs
Recently postedTechnology

Incident response Automation engineer-USA&Canada(Onsite)

ISite Technologies IncToronto, ON🇺🇸United States

Quick overview

SeniorityMid Senior
Work modeHybrid
LocationToronto, ON, United States
SplunkPythonGenerative AIRESTPrompt Engineering

Job description

Required Skills

  • 5+ years of experience in cybersecurity, security engineering, incident response, or security automation.

  • Hands-on experience with SIEM, SOAR, and security incident response processes.

  • Experience developing automated security workflows, playbooks, and API-based integrations.

  • Strong Python scripting skills and experience with REST APIs and JSON.

  • Knowledge of AI/ML, Generative AI, LLMs, prompt engineering, and AI-assisted security operations.

  • Experience with security platforms such as:

    • Splunk Enterprise Security and Splunk SOAR

    • Palo Alto Cortex XSOAR / XSIAM

    • Microsoft Sentinel and Logic Apps

    • IBM QRadar and security automation solutions

  • Strong understanding of incident response lifecycle, threat intelligence, malware analysis, and threat hunting.

  • Experience integrating EDR/XDR platforms such as CrowdStrike Falcon, Microsoft Defender for Endpoint, or SentinelOne.

  • Understanding of MITRE ATT&CK, common attack techniques, and security operations best practices.

  • Knowledge of authentication, identity security, cloud security, and enterprise network security

Similar jobs

Apply