Defender for Cloud Engineer

Hi, Greetings from OpenKyber! We reaching out about an exciting Direct client opportunity with one of our clients. Please review the requirements and let me know if you are interested in this position? Direct client Req:: Need Sr Security Operations Analyst ,Remote,TX PLEASE SEND THE RESUMES TO View email address on us.fitly.work ! Job Description: Key Responsibilities

Serve as a SOC analysis & Tier 3 escalation point for complex security incidents, performing deep-dive investigation, root cause analysis, and threat hunting across endpoint, network, cloud, and identity telemetry.

Design, build, and maintain detection analytics, dashboards, and hunting queries (Falcon Query Language / FQL) within CrowdStrike Falcon, tuning correlation rules and detection logic to reduce false positives and improve mean-time-to-detect

Architect and maintain security orchestration, automation, and response (SOAR) playbooks in Torq, integrating CrowdStrike Falcon, identity providers, ticketing, and communication platforms into automated response workflows.

Design AI-assisted analyst workflows (e.g., automated triage summarization, alert enrichment, playbook drafting) using approved generative AI tooling, ensuring all inputs are sanitized and free of regulated or case-specific data.

Lead incident response efforts for high-severity events, coordinating with IT, legal, and divisional stakeholders while strictly adhering to FTI/CJI handling restrictions.

Develop and maintain detection engineering documentation, runbooks, and standard operating procedures (SOPs) for Tier 1/Tier 2 analyst use.

Mentor and provide technical guidance to Tier 1 and Tier 2 SOC analysts; review and validate their investigative work and escalation quality.

Continuously evaluate and integrate emerging SOC automation and AI capabilities, presenting proposals for tooling changes with documented risk and compliance analysis.

Participate in an on-call rotation for critical incident escalations.

The above job description and requirements are general in nature and may be subject to change based on the specific needs and requirements of the organization and project.

Candidates that do not meet or exceed the minimum stated requirements (skills/experience) will be displayed to customers but may not be chosen for this opportunity.

• Progressive SOC, Tier 3 escalation, CrowdStrike Falcon
• SOAR automation, Torq, AI-assisted workflows
• Python, PowerShell, Falcon Query Language
• Incident response, detection engineering, runbooks
• Analytical skills, problem-solving, critical-thinking
• Zero Trust architecture, NIST 800-207, HIPAA

Minimum experience: 8 years

Degree: Bachelor's degree in Computer Science or related field

Certifications: GIAC, CrowdStrike, Torq preferred

Environment: Remote, TX

For applications and inquiries, contact:View email address on us.fitly.work