THEOS Cyber

Security Engineer

• Serve as the named technical security owner for a defined set of client accounts
• Own the effectiveness and continuous improvement of the MTDR service for assigned clients
• Act as the two-way technical interface between clients and Theos Defence’s SOC
• Maintain deep knowledge of client architecture, asset inventory, and strategic roadmap
• Lead monthly reviews covering events of interest and security posture enhancements
• Bring client context to SOC analysts and engineers and handle escalations
• Conduct hypothesis-driven threat hunts based on CTI, detection gaps, and ATT&CK-mapped attack paths
• Translate threat intelligence, indicators, and TTPs into actionable detection logic
• Audit, tune, prune, and improve detection rules to reduce alert noise
• Identify misconfigurations, AD risks, and broken baseline controls and help clients remediate them
• Investigate major incidents by correlating endpoint, identity, cloud, and network telemetry
• Construct incident timelines, blast-radius assessments, and root-cause analyses
• Support active compromise assessments and incident response engagements with environment context, hunting queries, and detection logic
• Perform investigation quality checks and mentor junior analysts
• Use analyst pain points to drive detection-engineering improvements

Explore Client Security Lead at THEOS Cyber. Review requirements and application details.