Cyber Defense Engineer

Cyber Defense Engineer

BeyondTrust is seeking a Cyber Defense Engineer to serve as a front-line defender responsible for protecting both BeyondTrust’s enterprise infrastructure and the integrity of the products our customers depend on. You will monitor, investigate, and respond to security events in an environment where the stakes are real and the adversaries are capable.

Responsibilities

• Monitor and triage security alerts across SIEM, EDR, and CSPM platforms.
• Investigate alerts to determine scope, severity, and whether escalation is warranted.
• Use AI-assisted triage and enrichment tools to accelerate analysis.
• Classify, document, and track alerts through the full lifecycle using ticketing and case management systems.
• Participate in or lead incident response engagements from detection through remediation.
• Contribute to the design, implementation, and tuning of detection rules across SIEM and EDR platforms.
• Use AI-driven tools for alert triage, enrichment, and investigation as a standard part of daily operations.
• Maintain daily operational notes and shift handoff documentation.
• Track and report on operational metrics and participate in tabletop exercises.

Requirements

• 4+ years of experience in a SOC, security operations, or incident response role.
• Understanding of common attack frameworks (MITRE ATT&CK), network protocols, and endpoint behavior.
• Experience with at least one SIEM platform and familiarity with writing search or detection queries.
• Familiarity with EDR platforms and cloud environments (IaaS preferred).
• Comfort using AI systems as part of security workflows.
• Strong written communication skills.

How to Apply Apply via the official BeyondTrust careers page.