Senior Security Engineer GIOC
Vultr is an active independent cloud-infrastructure company providing global compute, GPU, bare-metal, storage, Kubernetes, and serverless AI inference services.
About Vultr
Vultr provides globally available cloud infrastructure for developers, enterprises, and AI innovators, including Cloud Compute, Cloud GPU, Bare Metal, Cloud Storage, managed Kubernetes, and serverless inference.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will lead escalated security investigations and major incident-response efforts across SIEM, identity and access, endpoint, and cloud telemetry. You will analyze evidence, contain and eradicate threats, determine root causes, improve detections and automation, document findings, and mentor analysts while working rotational shifts and on-call coverage.
Requirements
- Graduate or Engineer in a relevant field
- 5-8 years of experience in security operations, incident response, or a SOC
- Hands-on expertise with SIEM, EDR, log analysis, and endpoint and network forensics
- Knowledge of attacker techniques, MITRE ATT&CK, threat intelligence, and incident response
- Experience leading complex investigations, containment, eradication, and root-cause analysis
- Detection engineering and automation skills with Python, SOAR playbooks, detection-as-code, and ITSM tooling
- Ability to work rotational 24x7 shifts and on-call coverage
- English verbal and written communication
Responsibilities
- Own escalated alerts and drive investigations to closure
- Lead deep analysis using log correlation, endpoint and network forensics, and threat intelligence
- Meet response SLAs and provide incident updates
- Determine incident scope, root cause, and attacker activity
- Drive containment, eradication, recovery, and security hardening
- Preserve forensic evidence and maintain chain of custody
- Lead major-incident and suspected-breach response bridges
- Build and tune detections and correlation rules
- Conduct proactive threat hunting using MITRE ATT&CK
- Automate triage and response with SOAR playbooks and scripting
- Author runbooks, detection logic, and knowledge-base articles
- Mentor security analysts and review investigation quality
- Lead post-incident reviews and track corrective actions
Benefits
- Annual medical insurance stipend
- 9 company-paid holidays
- Generous leave policy
- One month paid sabbatical every 5 years
- Annual anniversary bonus
- Professional development reimbursement
- Internet reimbursement
- Fitness membership reimbursement
- Company-paid Wellable subscription