Senior Incident Response Engineer

OverviewExperteer OverviewAs Incident Response Lead at Kong, you will drive the detection, containment and recovery of security incidents in a collaborative, cross-functional environment.

Se desidera conoscere i requisiti per questo ruolo, continui a leggere per trovare tutte le informazioni pertinenti.

You’ll shape incident handling processes and playbooks, enabling a 24/7 capable security operations program.

The role emphasizes stakeholder communication, forensics, and continuous improvement to protect customers, partners and employees.

You will work closely with engineering and security teams to keep Kong secure and compliant, delivering measurable incident response improvements.

This is a chance to impact security at scale within a fast-moving tech company.ResponsibilitiesDevelop and document incident handling guides and processes for KongPrioritize and correlate events to reduce false positives and improve threat detectionTune security alerts, interpret events, and create new signals from signatures and behaviorsRespond to security incidents and conduct forensics as neededLead mitigation strategies for identified vulnerabilities and threatsDesign, automate, and maintain alerts, actions, and escalation workflows for 24/7 incident responseConduct threat hunting and maintain forward-looking security strategiesAssist with counter-measures and mitigating controls implementationDevelop and maintain Incident Response capabilities in public cloud environmentsPrepare incident reports with methodology and resultsAnalyze intrusions through event detail reviews and summarize findingsPartner with stakeholders to improve preparation, identification, analysis, containment, and post-mortem activitiesDevelop monthly incident and response metrics dashboardsPrepare executive summaries and briefings on significant investigationsQualificationsCrisis xlwpduy management experience to prevent incidents from becoming crisesAbility to leverage incidents to drive innovation and awarenessPassion for automation, delegation, and scalable processesExperience automating detection, containment, and elimination of threatsExpertise in security information/event management systems (SIEM) and centralized loggingPractical cloud experience with TerraformExperience with building/deploying solutions (Ansible, Terraform)Competency in Linux and WindowsAbility to automate workflows with Python or JavaScript #J-18808-Ljbffr