Citi Group Cloud Detection Response Engineer - GCP-Vice President-Irving TX 

United States, Texas, Irving 

759325734

Cloud Detection & Response Engine

As a Senior Cloud Detection and Response Engineer, you will be responsible for developing, implementing, and managing advanced cloud detection and response strategies. You will leverage your expertise in GCP, detection engineering, and cloud-native technologies to protect our cloud infrastructure and ensure the security and integrity of our systems.

Key Responsibilities:

• Develop and implement detection engineering strategies for GCP cloud environments.
• Create and manage detection-as-code pipelines to automate threat detection and response.
• Design, develop, and maintain software solutions within the SDLC to enhance cloud security posture.
• Utilize Splunk for security monitoring, log management, and incident response.
• Work with Cloud Security Posture Management (CSPM) and Cloud Native Application Protection Platform (CNAPP) solutions to continuously improve cloud security.
• Collaborate with cross-functional teams to ensure security best practices are integrated into cloud architectures and development processes.
• Conduct regular security assessments, vulnerability testing, and incident response simulations.
• Stay updated with the latest cloud security trends, threats, and technologies to proactively address potential security issues.
• Mentor and provide guidance to junior engineers, fostering a culture of security excellence.

Qualifications:

• Proven experience (3+ years) in cloud detection and response, with a focus on GCP or Azure.
• Expertise in detection engineering and developing detection-as-code pipelines.
• Strong background in software development within a well defined SDLC, using language such as python or golang.
• In-depth experience with detection technologies, such as SIEM, CSPM and CNAPP platforms.
• Deep understanding of cloud-native engineering principles and best practices.
• Strong analytical and problem-solving skills, with the ability to think like an attacker.
• Excellent communication and teamwork skills.
• Relevant certifications such as GCP Professional Cloud Security Engineer, or similar are desirable.

Preferred Skills:

• Experience with infrastructure as code (IaC) tools such as Terraform.
• Experience working with the MITRE ATT&CK knowledge base.
• Experience with Attack Simulation/Detection Engineering tools, e.g. Splunk Attack Range Atomic Red Team
• Knowledge of container security and orchestration tools like Kubernetes.
• Familiarity with DevSecOps practices and integrating security into CI/CD pipelines.
• Strong scripting skills (Python, Bash).

Anticipated Posting Close Date:

View the " " poster. View the .

View the .

View the