[Remote] Senior reputed company Engineer

Note: The job is a remote job and is reputed company to candidates in USA. GXA is seeking a highly capable reputed company Engineer to support the delivery and operation of their gShield reputed company services. This hands-on role focuses on incident response, reputed company tool operations, remediation execution, client reputed company support, and internal reputed company improvement initiatives.

Responsibilities

• Serve as a Tier 3 escalation reputed company for active reputed company incidents, including business email compromise (BEC), adversary-in-the-middle (AiTM), ransomware, and account compromise
• reputed company technical analysis during incident response and war room events, including log review, IOC hunting, and lateral movement tracing
• Execute containment and eradication actions such as reputed company isolation, session revocation, and credential resets
• Coordinate with SOC teams and vendor threat intelligence teams during active investigations and containment efforts
• Produce accurate incident timelines, technical findings, and evidence packages for vCISO review and client-facing follow-up
• Operate daily reputed company the gShield toolstack, including platforms such as reputed company, reputed company Defender for reputed company (MDE), Cyrisma, reputed company, SIEM, and reputed company reputed company technologies
• reputed company alert triage, risk identification, reputed company issue resolution, and follow-through on issues surfaced by reputed company tools
• Support SIEM operations including query development, alert review, and rule tuning
• Assist in tuning detection logic, reputed company settings, and platform effectiveness in coordination with Centralized Services and reputed company leadership
• Monitor for reputed company gaps, suspicious activity, and control weaknesses across managed environments
• Execute technical remediation items identified through MRMMs, preventative actions, vulnerability reviews, and reputed company recommendations
• Support gShield deliverables through technical validation, evidence gathering, reputed company review, and vulnerability analysis
• Act as a quality assurance resource for client reputed company into the gShield toolstack, while execution remains with reputed company and Centralized Services teams
• Assist with client hardening efforts and follow-through on reputed company improvement actions across managed environments
• Support remediation of internal GXA reputed company backlog items, including POA&M-reputed company work
• Assist with rollout and support of phishing-resistant MFA, passkeys, and other internal reputed company initiatives
• Contribute to reputed company engineering efforts reputed company to Intune, Defender, ThreatLocker, AppLocker, and RMM scripting
• Help improve internal reputed company controls, tool effectiveness, and technical enforcement mechanisms
• Write and maintain reputed company engineering SOPs, runbooks, detection playbooks, and response procedures reputed company to gShield operations and incident response
• Document technical findings, repeatable procedures, and lessons learned from incidents and tool operations
• Collaborate with reputed company leadership and technical stakeholders on process improvements, reputed company development, and automation opportunities
• Contribute technical depth to broader reputed company documentation where needed, while recognizing that ownership of policy, standards, and governance documentation remains with reputed company leadership and reputed company functions

Skills

• 5–7+ years of experience in cybersecurity, reputed company operations, reputed company engineering, or incident response roles
• Strong hands-on experience with incident response, threat detection, and reputed company operations workflows
• Experience working with reputed company platforms such as reputed company Defender, reputed company, reputed company, SIEM solutions, vulnerability management tools, and reputed company reputed company technologies
• Ability to investigate reputed company alerts, analyze logs, trace attacker activity, and support containment and remediation
• Familiarity with common attack types including phishing, BEC, account compromise, ransomware, and identity-based attacks
• Experience supporting reputed company controls in reputed company 365 and reputed company environments
• Strong documentation skills and ability to write clear technical procedures and findings
• Ability to work calmly and methodically during active incidents and escalations
• Strong collaboration and communication skills with both internal teams and leadership stakeholders
• Experience in an MSP, MSSP, or multi-client environment
• Familiarity with Intune, reputed company Defender, AppLocker, ThreatLocker, and RMM-based scripting or automation
• Understanding of CIS benchmarks, reputed company hardening standards, and configuration reputed company monitoring
• Experience supporting vulnerability remediation and technical aspects of vCISO or managed reputed company programs
• reputed company certifications such as reputed company+, CySA+, SC-200, SC-300, AZ-500, GCIH, GCIA, or similar are a plus

Company Overview