VP, Senior Threat Informed Defense Engineer

Synchrony - Rapid City, SD

Full-time - Senior

Remote - Rapid City, SD

Credit Intermediation and Related Activities

About the position

The VP, Senior Threat Informed Defense Engineer is a pivotal role within the Threat Informed Defense Team at Synchrony, focusing on assessing emerging cyber threats and developing advanced detection controls. This position requires a deep understanding of cyber threats and the ability to analyze data to identify opportunities for preventative and detective improvements. The ideal candidate will thrive in a dynamic environment and possess a passion for cybersecurity.

Responsibilities

• Possess expert knowledge of attacker tradecraft and forensic presentation of Tactics, Techniques, and Procedures (TTPs) across Endpoint, Network, Cloud, Identity and Access security domains.
• Maintain a deep understanding of attack chains and how adversaries move across security domains.
• Develop advanced detection logic utilizing various query languages or statistical methodologies.
• Perform impactful data analysis and exploration which produces recommended actions in a timely fashion with little or no oversight.
• Exhibit expertise in testing TTPs within a secure lab setting and developing custom detection content to address identified gaps.
• Foster cross-functional collaboration across IS teams, contributing to the enhancement of detection alerting strategies.
• Remain current on Incident Response procedures.
• Proficient in identifying relevant log sources and developing effective detection mechanisms to detect and respond to security threats proactively.
• Mentor and train team members.
• Demonstrated ability to clearly document findings and present concise briefings to stakeholders.

Requirements

• Experience in threat intelligence, threat hunt, or red team capacity utilizing threat intelligence and attack-focused frameworks.
• Able to communicate complex information, concepts, or ideas in a confident and well-organized manner through verbal, written, and/or visual means.
• Experience developing advanced detection content.
• Able to function effectively in a dynamic, fast-paced environment.

Nice-to-haves

• Applicable Information Security professional certifications (e.g., SANS, ISC2) and tool specific certifications
• Agile and code development experience

Benefits

• Remote work flexibility
• Annual bonus based on individual and company performance
• Salary range of $130,000.00 - $210,000.00 USD Annual