Cyber Operations Engineer (IR) (R26_0000028929)

Deploy

Pay not stated in the posting

Posted 5 days ago · Confirmed live 6 hours ago

Skills this job asks for

  • Incident Management
  • Threat Hunting
  • Security Monitoring
  • SIEM
  • Cloud Security
  • Test Methodology
  • EDR (Endpoint Detection and Response)
  • Identity Management
  • Data Loss Prevention Software
  • Threat Intelligence
  • Cyber Defence
  • Backup & Recovery Systems

Tailor your resume for this job

See which of these skills you have, and tailor your resume for this job.

Sign up free

Tailor your resume for this job

Start from your profile and shape your resume to this role.

At a glance

Type
Full-time
Level
Mid level
Experience
3-5 years
Work model
Not stated
Schedule
Not stated
Education
Bachelor's degree
Benefits
Not stated
Team
Engineering

Description

Req #: R26_0000028929 | Cyber Operations Engineer (IR) | Birmingham, Alabama | Hybrid

SUMMARY:

Under general supervision the Cyber Defense Engineer II will work across cloud security, Identity and Access Management (IAM), infrastructure protection, cyber recovery, Disaster Recovery (DR) engineering, application security, DevSecOps, security tooling and automation, and data loss prevention. This role executes day-to-day Cyber Defense Engineering activities within their assigned domain.

JOB DUTIES

  • Supports proactive threat hunting activities, forming hypotheses and investigating anomalies across the environment.
  • Consumes and operationalizes threat intelligence feeds, translating findings into hunting priorities and detection improvements.
  • Participates in security operations center monitoring, incident response, and insider risk investigations as part of shared team coverage.
  • Supports cyber recovery execution and managed service oversight as needed to ensure team-wide coverage.
  • Documents and maintains findings, Standard Operating Procedures (SOPs) and playbooks for threat hunting and detection processes.
  • Participates in the security on-call rotation as needed.
  • Supports execution of cyber recovery activities, including operational technology recovery procedures and disaster recovery testing exercises.
  • Performs other duties as assigned.

EDUCATION & EXPERIENCE

  • Typically requires a bachelor's degree in computer science, software engineering, or a related field and three (3) to five (5) years of related experience or equivalent experience.

KNOWLEDGE, SKILLS, ABILITIES

  • Relevant certifications.
  • Experience with relevant platforms and testing methodologies.
  • Experience operating SIEM platforms and analyzing log data.
  • Experience with EDR, content filtering, and/or other security toolsets.
  • Experience with cyber asset monitoring and technical asset management tools.
  • Strong analytical and investigative skills.
  • Comfortable operating in a shared-coverage, lean team environment.

SUPERVISORY RESPONSIBILITY: No Supervisory Responsibility

BUDGET RESPONSIBILITY: No

DEPLOY's client offers an excellent benefits package which includes options for healthcare coverage, 401(k), tuition reimbursement, vacation, sick, and holiday pay.

This job description illustrates the general nature and level of work performed by employees within this job classification. It is not intended to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and skills required. Management retains the right to add or modify duties at any time.

About Deploy

Deploy

See all 11 open roles at Deploy