Teams at Center for Internet Security

Supports security operations by onboarding and troubleshooting network monitoring infrastructure, triaging security-device issues, resolving escalated customer problems, coordinating vendor maintenance, and managing hardware sensors. The role collaborates with SOC analysts, assists with testing and quality assurance, provides customer support, and participates in on-call incident response. Requires network and security administration experience, TCP/IP knowledge, command-line expertise, and troubleshooting across Linux, Windows, and macOS.

Engineer and operate SIEM and SOAR platforms supporting SOC and MDR services. Responsibilities include log-source onboarding, parsing, enrichment, detection engineering, playbook automation, alert and dashboard development, end-to-end pipeline troubleshooting, vendor escalations, customer onboarding, ingest-volume management, documentation, and platform incident response. The role serves as the technical escalation point and participates in an after-hours on-call rotation.

Leads software engineering teams and organizations, providing technical direction across architecture, agile delivery, cloud, DevOps, cybersecurity, and AI-enabled development. Oversees engineering standards, modernization, technical debt reduction, quality, reliability, performance metrics, risk mitigation, budgets, recruiting, and distributed-team development. Partners with business, product, architecture, cybersecurity, and operations stakeholders to deliver scalable, secure products and infrastructure aligned with organizational objectives.