SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Conviva is the experience analytics platform for AI agents, apps, and streaming. The company pioneered quality of experience measurement for streaming video and has supported major digital events including 20 Super Bowls, 10 Olympic Games, and five FIFA World Cup tournaments.
You will lead security operations, threat detection, incident response, and security automation efforts across enterprise systems, cloud environments, and critical assets. This is a hands-on technical role with significant leadership responsibilities.
Key responsibilities include:
**Security Operations & Threat Detection:** Lead monitoring and detection across multi-cloud (AWS, Azure, GCP) and hybrid infrastructure. Optimize SIEM and SOAR platforms by creating custom detection rules, dashboards, and automated response playbooks. Conduct proactive threat hunting using threat intelligence feeds, behavioral analytics, and indicators of compromise.
**Incident Response & Digital Forensics:** Serve as technical lead for high-severity incidents, managing containment, eradication, recovery, and root-cause analysis. Direct DFIR investigations across endpoints, networks, and cloud logs. Maintain and conduct periodic tabletop exercises for incident response readiness.
**Security Automation & DevSecOps:** Drive "Security as Code" principles by integrating security controls into CI/CD pipelines and infrastructure-as-code (Terraform, CloudFormation). Develop custom automation scripts (Python, PowerShell, Bash, Go) to streamline security tasks, reduce false positives, and accelerate mean time to respond.
**Infrastructure & Cloud Security:** Design and enforce security policies for network security, IAM, zero-trust architectures, containerized environments (Kubernetes, Docker), and SaaS applications. Conduct regular vulnerability management cycles with prioritization based on business impact and threat severity.
**Compliance & Leadership:** Provide technical guidance to SOC analysts and component specialists. Collaborate with audit and compliance teams on security frameworks (ISO 27001, SOC 2, GDPR). Prepare executive briefings and operational metrics (MTTD, MTTR, vulnerability turnaround).
**REQUIREMENTS:**
**Required Experience & Skills:**
- 8–10 years of progressive cybersecurity experience, with at least 5+ years dedicated to Security Operations (SOC), Incident Response, or DevSecOps
- Deep hands-on experience configuring, managing, and tuning Enterprise SIEM platforms (Splunk, Microsoft Sentinel, Elastic) and SOAR platforms (Palo Alto XSOAR, Swimlane, Tines)
- Deep familiarity with securing cloud infrastructure (AWS, Azure, or GCP), cloud-native security tools (GuardDuty, Defender, CloudTrail), and identity controls
- Strong proficiency in at least one programming/scripting language (Python, PowerShell, Bash, or Go) for automation and API integrations
- In-depth knowledge of TCP/IP, OSI model, packet analysis (Wireshark), EDR/XDR systems (CrowdStrike, SentinelOne, Defender for Endpoint), and OS security (Linux & Windows)
- Proven track record leading high-impact security incident investigations under pressure
**Preferred Qualifications:**
- Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Technology, or equivalent experience
- One or more certifications: CISSP, GIAC certifications (GCIH, GCFA, GNFA, GCDS), CISM, or cloud security certifications (AWS Certified Security – Specialty, Microsoft Certified: Azure Security Engineer Associate, CCSP)
- Familiarity with Kubernetes, Docker, CI/CD platforms (GitHub Actions, GitLab CI, Jenkins), and infrastructure-as-code tools
**Soft Skills:**
- Exceptional analytical and diagnostic skills with ability to trace complex technical anomalies to root cause
- Ability to articulate complex security risks and incident details clearly to non-technical business leaders and technical teams
- Calm under pressure during active cyber incidents with strong decisive leadership abilities
- Passionate about keeping pace with emerging threat landscapes, zero-day vulnerabilities, and defensive technologies
