Cyber Defense Specialist

Role overview Help defend a technology platform by investigating alerts, making containment decisions, and improving incident response. Automated agents can triage signals, enrich indicators, and draft timelines under rules you set; you retain responsibility for decisions and for defining when human approval is required.

Responsibilities - Hunt for threats and assess security alerts and enriched indicators. - Decide how to contain incidents and document findings in post-mortems. - Set boundaries for which response actions agents may take independently and which require your approval. - Use threat context, including information-operations activity, to understand campaigns. - Work with Linux hosts, containers, a web server, and the deployment pipeline as part of defense operations.

Requirements - The role calls for blue-team security work, including threat investigation and incident response. - Judgment to make containment decisions and establish safe limits for automated actions. - Ability to document incidents and produce post-mortems. - Familiarity with Linux, Docker, Caddy, or deployment pipelines is relevant to the described environment.

Benefits and work setup - Remote-first work with asynchronous collaboration and a weekly review. - Initial training on the team’s tools and equipment provided.