Detection And Automation Engineer
Skechers
posted 5 months ago
About the position
Our Cybersecurity Engineers at Skechers are key members of our global cybersecurity team. This role is responsible for deploying, tuning, and managing security tools as well as continuously improving Skechers overall cybersecurity posture. With a focus on detection and response, you'll be implementing and managing systems for log and event data processing and analysis, detection engineering, and response automation. While on the front lines of our global cyber defense practice, you'll act as an escalation point for incidents and alerts, while working proactively to identify and resolve cybersecurity issues. The role will involve working closely with various infrastructure, application, and business teams globally to identify and respond to issues as well as help facilitate secure operations. This is a great opportunity for someone looking to join an agile cybersecurity team with an eye for innovation and a continuous improvement mindset. The candidate who will find the most success and fulfillment brings a genuine interest and passion for cybersecurity, a love for learning, a positive attitude, and a desire to roll up their sleeves and dive into the deep end.
Responsibilities
- Source, integrate, and leverage log and event data to create insights and develop queries, detections, and dashboards
- Build and continuously improve automation workflows that support and mature the detection and incident response process
- Drive regular threat hunting and purple team exercises to strengthen detection capabilities
- Evaluate, deploy, and maintain innovative security tools, technology, and systems
- Perform security assessments on new and existing systems, processes, and technology
- Define policies for email security, endpoint protection, application whitelisting, and other systems and network enforcement points
- Triage alerts and reports received from various sources and perform incident response in real time as needed
- Collaborate to define cybersecurity standards and develop secure procedures
- Work closely with multiple global groups and business units to provide guidance and support
- Perform regular security and vulnerability reviews and participate in periodic security and compliance audits
- Stay current with continually changing threat landscape and defensive capabilities
Requirements
- Strong working knowledge in cybersecurity, systems, cloud, or network engineering
- 5+ years of experience in a dedicated cybersecurity role, or a combination of equivalent information technology experience, training, and education
- Advanced experience with event log management, aggregation, alerting, and monitoring
- Experience with scripting (Python, PowerShell, etc.) and building automation workflows
- Deep understanding of security concepts relating to identity and access management, network architecture, and systems hardening in a large heterogeneous environment
- Experience working with servers and workstations running Windows, Linux, and OS X
- Strong experience with public cloud services (AWS, Azure, GCP) a plus
- GIAC, (ISC)2 , or equivalent certifications a plus
