Apply security operations expertise to vulnerability remediation, telemetry analysis, and automation across CarltonOne’s global technology workplace.
This Senior Security Incident Responder and Remediation Specialist handles security incidents across internal corporate IT and the revenue-generating platform. You will personally investigate logs, traces, and metrics, correct vulnerabilities and misconfigurations, and build response automation. The first 90 days require working hours aligned with EST for onboarding and training.
Key Responsibilities:
Prioritize vulnerabilities by exploitability and business exposure
Remediate operating systems, cloud workloads, identities, endpoints, and tenants
Build and maintain SOAR playbooks and response scripts
Tune SIEM detection rules and correlation logic
Lead post-incident reviews and maintain runbooks
Requirements:
Five to eight years handling incidents and remediation hands-on
Experience with Datadog, Sentinel, Splunk, Rapid7, or Cortex XSOAR
Solid Python, PowerShell, or Bash scripting skills
Practical AWS, Azure, or GCP security remediation experience
Corporate infrastructure security across identity, endpoints, M365, and VPNs
Bring automation, vulnerability management, cloud security, and telemetry skills to CarltonOne’s hands-on security operations team.