Principal Incident Response Engineer, Remote

📋 Description

• • As a Principal Security Analyst at Autodesk, you will be at the forefront of defending our digital assets, taking on the critical responsibility of conducting deep technical investigations and advanced threat analysis. This role is pivotal in safeguarding the company's security posture, requiring a proactive and meticulous approach to identifying, analyzing, and remediating security incidents.
• • Your primary technical focus will be on leveraging exceptional Splunk skills to integrate and analyze vast amounts of data from multiple platforms. You will be instrumental in building robust data pipelines, drawing information from both cloud-based services (Azure, AWS, GCP) and on-premises infrastructure, and feeding it into our Splunk instance for comprehensive monitoring and analysis.
• • You will be tasked with developing and maintaining technical playbooks, which are essential for standardizing our incident response procedures and ensuring efficient, repeatable actions during security events. This includes enhancing our detection capabilities by identifying gaps and implementing new detection rules and logic within Splunk and other security tools.
• • A significant aspect of this role involves contributing to proactive threat hunting initiatives. You will actively seek out potential threats and vulnerabilities before they can be exploited, employing advanced analytical techniques and threat intelligence to stay ahead of emerging attack vectors.
• • You will play a key role in developing and refining effective incident response strategies. This involves not only reacting to incidents but also learning from them to continuously improve our overall security framework and resilience.
• • Collaboration is central to this position. You will work closely with the Incident Response Manager and various cross-functional teams, including IT, legal, and engineering, to coordinate incident mitigation efforts. Your ability to communicate complex technical findings clearly and concisely will be vital in ensuring swift and effective resolution.
• • You will also serve as a technical mentor to less experienced team members. Sharing your expertise, guiding their investigations, and fostering an environment of continuous learning and professional development will be a crucial part of your contribution to the team's growth and overall effectiveness.
• • Operating within a cloud-agnostic framework is a must, requiring you to be comfortable and adept at managing security operations across diverse cloud environments such as Azure, AWS, and Google Cloud Platform. This includes understanding the unique security challenges and solutions within each of these platforms.
• • Your responsibilities will extend to conducting detailed investigations on high-complexity incidents, meticulously correlating data from disparate sources using Splunk to pinpoint Indicators of Compromise (IOCs) and determine the definitive root causes of security breaches.
• • You will be expected to independently conduct sophisticated threat analyses and forensic investigations, demonstrating a deep understanding of attacker methodologies and digital forensics principles.
• • The role demands strong analytical and problem-solving skills, enabling you to dissect complex security issues and devise effective solutions under pressure.
• • Ultimately, you will be a key player in protecting Autodesk's intellectual property, customer data, and reputation by ensuring a rapid, effective, and thorough response to security incidents.