Lead Threat Detection Engineer

Job Description Summary

The Lead Threat Detection and Response Engineer is highly technical role that will lead the Incident Response process within BCBSA Cyber Defense team. This role acts as the DFIR subject matter expert that plans and oversees initiatives to bring the best techniques in detection and response to BCBSA. The Lead Threat Detection and Response Engineer will provide training, mentoring, and advice to other engineers and analysts.

Responsibilities include but are not limited to:

Act as a technical lead for security related incidents in the corporate environment. Provide oversight to the identification, containment, and remediation of a security incident. Execute formal root cause analysis and lessons learned to improve the effectiveness of the processes and optimize controls.

Execute formalized processes and build a technology stack to establish an advanced threat detection capability.

Develop and maintain Incident Response processes, exercises and trainings to other engineers and analysts.

Provide hands-on malware reverse engineering and forensics support (i.e., forensic artifact handling and analysis).

Enhance and integrate security ...