Security Operations

• Serve as a senior escalation point for complex, ambiguous, and high-severity security incidents
• Conduct detailed investigations into initial access vectors, attacker activity, objectives, compromise scope, and dwell time
• Perform root cause analysis on confirmed incidents and near misses
• Lead significant incidents through containment, eradication, and recovery across global and regional teams
• Conduct host and network forensics and malware triage
• Translate technical findings into business-risk statements and drive post-incident corrective actions to closure
• Investigate identity-based attacks, account compromise, unauthorized access, and suspicious activity across cloud platforms and enterprise applications, including Microsoft 365 and Entra ID
• Participate in an on-call rotation and provide out-of-hours escalation support
• Design, build, tune, and maintain MITRE ATT&CK-mapped detection content
• Reduce false positives through tuning, suppression logic, and automated alert enrichment
• Translate threat intelligence into detections, threat-hunting hypotheses, and preventive controls
• Design and maintain automated response playbooks using Logic Apps, automation rules, and SOAR workflows
• Write and maintain KQL, PowerShell, Python, or equivalent queries, scripts, and code
• Integrate security tooling and data sources through APIs and connectors, including onboarding and validating new log sources
• Improve security monitoring, detection, response, automation, and technology optimization
• Apply AI-assisted investigation, alert triage, and security automation capabilities
• Conduct proactive threat hunting to identify suspicious activity and validate detection effectiveness
• Work closely with global and regional technology and security teams and provide technical leadership during significant incidents

Explore Global Security Operations Engineer at Dentons. Review requirements and application details.