Threat Cybersecurity Engineer

About the role

Exiger, an AI partner for supply chain and procurement automation, is looking for an experienced Threat Cybersecurity Engineer to strengthen its security operations and protect a growing technology environment. The role is hands-on, covering security monitoring, threat detection and hunting, incident response, attack-surface management and security automation, and works closely with Security, IT, engineering, cloud and compliance teams.

Key responsibilities

• Administer and optimize endpoint detection, SIEM and security-monitoring capabilities.
• Monitor, triage and investigate threats across endpoint, identity, cloud, application and network environments.
• Run proactive threat hunts using threat intelligence, behavioral analytics and attacker techniques.
• Develop and tune detection rules, alerts, dashboards and automated response workflows aligned with MITRE ATT&CK.
• Identify and prioritize exposed assets, vulnerabilities and other security weaknesses.
• Coordinate incident containment, remediation, recovery, root-cause analysis and post-incident improvements.
• Maintain investigation playbooks, procedures, metrics and executive reporting.
• Take part in the security operations on-call rotation as required.

Required profile

• Seven or more years of experience in security engineering, security operations, incident response, threat detection or a related discipline.
• Demonstrated ability to develop and tune detections, investigate complex alerts and distinguish real threats from false positives.
• Experience conducting structured threat hunts and mapping attacker behavior to MITRE ATT&CK.

Required skills

• Advanced experience with endpoint protection, endpoint detection and response, SIEM administration and security investigations.
• Working knowledge of attack-surface management, vulnerability management, asset discovery and risk-based remediation.
• Strong understanding of Windows, Linux, cloud, network, identity and endpoint security.