remote
Senior Information Security Engineer - Cybersecurity Incident Response - Lumen
Security Engineer
Senior security engineer leading cyber‑incident response, threat hunting, and forensic analysis across cloud and on‑prem environments, leveraging SIEM tools, Python automation, and Linux expertise to protect enterprise networks.
About the role
Key Responsibilities
- Lead detection, analysis, and containment of security incidents across hybrid cloud and on‑premise infrastructure.
- Develop and tune SIEM rules, dashboards, and alerts to improve threat visibility.
- Conduct threat hunting and forensic investigations using Linux tools, scripting, and cloud logs.
- Automate incident response workflows and post‑mortem reporting with Python and cloud APIs.
- Collaborate with engineering and operations teams to remediate vulnerabilities and harden systems.
Requirements
- 5+ years of hands‑on experience in cybersecurity incident response and threat hunting.
- Proficiency with SIEM platforms (e.g., Splunk, QRadar) and log analysis.
- Strong scripting skills in Python and deep knowledge of Linux/Unix environments.
- Experience securing cloud platforms, preferably AWS, including IAM, VPC, and monitoring services.
- Relevant certifications such as GCIH, GCIA, or CISSP are a plus.