About this role
- Build & Tune Detections: Design, implement, and fine-tune rules across Chronicle (YARA-L), Wiz, and SentinelOne, plus our DLP and UEBA surfaces. Move beyond out-of-the-box alerts, actively cut false positives, and own the detection lifecycle from rule creation to retirement.
- Investigate & Triage: Act as the primary technical investigator for insider risk alerts. Analyze logs, reconstruct user timelines across our entire stack, and determine what happened, why, and what to do about it — including intent behind data movement.
- Reduce the Noise: Continuously tune alerts and detection logic to drive down false positives and keep the signal high.
- Automate Workflows: Write code (TypeScript) to automate repetitive triage tasks and integrate our insider risk tools with our SIEM and SOAR platforms. If you repeat a triage step twice, automate it.
- Weaponize AI for Investigations: Build and tune LLM-powered agents that triage alerts, enrich them with cross-platform context, and reconstruct investigation timelines automatically. Turn repetitive forensic work into autonomous workflows.
- Cross-Functional Operations: Partner directly with Legal, People, and other Security teams to safely and discreetly conduct forensic investigations and coordinate remediation efforts.
- Threat Hunting: Proactively hunt for undetected anomalous behavior, unauthorized shadow IT usage, or risky data handling practices across endpoints and cloud environments.
The Future We See
At CloudWalk, we envision a future where AI empowers every field to reach new heights:
- People teams leveraging AI to transform talent acquisition and employee development.
- Marketing professionals creating data-driven, AI-powered campaign strategies.
- Customer Success teams enhancing client experiences with intelligent solutions.
- Risk analysts combining human expertise with AI to navigate complexities.
- Designers collaborating with AI to push creative boundaries.
Join us at CloudWalk, where we're not just engineering solutions; we're building a smarter, AI-driven future for payments—together.
By applying for this position, your data will be processed as per CloudWalk's Privacy Policy.