Anaplan

Anaplan

Anaplan provides a connected planning platform for finance, supply chain, and sales strategies, enabling large organizations to make informed plans, drive effective decision-making, and transform planning processes.

Internet Software & Services
1K-5K
Founded 2006

Description

  • Own and improve the SIEM platform, including log source onboarding, parser development, data pipeline quality, and platform performance.
  • Design, develop, test, and maintain high-quality detections using a Detection as Code methodology.
  • Map detections to the MITRE ATT&CK framework and continuously improve detection coverage, precision, and resilience.
  • Build and maintain SOAR workflows and playbooks to streamline alert triage, enrichment, and response.
  • Identify manual security operations processes and automate them to help the team operate at scale.
  • Evaluate and operationalize AI and machine learning use cases to improve alert triage, incident response, threat intelligence analysis, threat hunting, and detection enrichment.
  • Consume and integrate threat intelligence from internal and external sources into detections, playbooks, and hunting activities.
  • Conduct proactive threat hunts to identify attacker activity and use findings to improve detections and tooling.
  • Provide engineering-level support during security incidents, including investigation, containment, recovery, and post-incident reviews.

Requirements

  • Significant experience in a security engineering, DevSecOps, or equivalent role.
  • Strong background securing cloud-native environments and modern application stacks.
  • Practical experience developing and tuning SIEM detections, writing threat hunting queries, and supporting incident response.
  • Hands-on experience administering SIEM platforms such as Splunk or Microsoft Sentinel.
  • Experience with EDR/XDR solutions, vulnerability scanners, and ticketing or case management systems.
  • Experience integrating security operations tools to support detection, investigation, and response workflows.
  • Experience with threat intelligence platforms and feeds such as MISP, Recorded Future, or VirusTotal.
  • Proficiency in one or more scripting or programming languages such as Python, Go, or Bash.
  • Familiarity with secure development practices, OWASP Top risks, and code review or developer collaboration for remediation.
  • Working knowledge of security frameworks and standards such as NIST CSF, CIS Benchmarks, MITRE ATT&CK, SOC 2, or ISO 27001.
  • Strong communication and collaboration skills for working with technical and non-technical stakeholders.
  • Hands-on experience leading or supporting security incident investigations, including forensic analysis and root cause identification.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

DevOps Engineer 3 (Sr DevSec Engineer)

Black Duck Inn 1K-5K Internet Software & Services

Black Duck Software is hiring a Sr DevSec Engineer, Cloud Operations to own the global GCP-based infrastructure behind its SaaS and hosted products, ensuring secure, highly available service delivery for enterprise customers.

Argo CD Bash CI/CD DNS Docker GCP GitHub Actions GitOps Go Java Jenkins Kubernetes LLM Load Balancing Python Terraform TLS
2 hours, 18 minutes ago

Senior Director of Security Operations

Super Technologies Pvt Ltd 1-10 aviation & aerospace

Super is hiring a Director of Security Operations to lead organization-wide security defense, visibility, and incident response across its international technology platform for sports, gaming, and fan experiences.

CrowdStrike Kubernetes SIEM WAF
3 hours, 3 minutes ago

Information Systems Security Officer (ISSO) - Subject Matter Expert (SME)

Avint 11-50 IT Services

Avint is hiring an Information Systems Security Officer (ISSO) Subject Matter Expert to oversee the day-to-day cybersecurity operations of assigned systems and help maintain compliance with RMF and federal security requirements.

Cybersecurity Network Security Splunk
1 day, 2 hours ago

Information Systems Security Officer (ISSO) - Senior

Avint 11-50 IT Services

Avint is hiring a Senior Information Systems Security Officer to lead RMF execution, security authorization, and cybersecurity oversight for information systems and applications supporting organizational compliance and resilience.

Cybersecurity
1 day, 2 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers