Lead Engineer - CDOC Threat Management

Company Summary
DISH Network Technologies, an EchoStar company, has been reimagining the future of connectivity for more than 40 years. Our business reach spans satellite television service, live-streaming and on-demand programming, smart home installation services, mobile plans and products and now we are building America's First Smart Network™.
Today, our brands include EchoStar, Hughes, DISH TV, Sling TV, Boost Mobile and Gen Mobile.
Department Summary
Our Technology teams challenge the status quo and reimagine capabilities across industries. Whether through research and development, technology innovation or solution engineering, our people play vital roles in connecting consumers with the products and platforms of tomorrow.
Job Duties and Responsibilities
DISH is enhancing its Threat Response and Management program in the Information Security department. The program aims to enhance efficiency and effectiveness of the response process to any security threats occurring on DISH network, applications / data. This role will work under the direction of the CDOC Management / Leadership team to execute the operational processes and tasks within DISH's Threat Management program.

• Serve as one of escalation points for unresolved security incidents reported by Threat Analyst (Tier 1/2) team
• Perform technical investigations on security incidents, root cause analysis, recommend and mitigate the effects caused by an incident
• Provide technical Incident Response guidance to the Threat / Incident Response Analysts
• Create Incident Response process / run books / SOPs and ensure continuous documentation and reporting
• Interface with global teams and ensure proper hand-off for successful completion of the incident Response process
• Perform Analysis and investigation of Logs and events from various log sources, advanced Correlation rules, dashboards, Reports
• Provide Security Advisory, Develop use cases, support in deployment/integration and fine tuning of security devices

Skills, Experience and Requirements

• Ability to conduct cybersecurity investigations analyze and distill relevant findings and determine root cause
• Knowledge of security technologies such as SIEM (elk stack), Firewall/NGFW, EDR / DLP, UEBA and hybrid/Cloud Security environments including Palo Alto (PRISMA, XDR, XOAR), Zscaler
• Technical experience and familiarity of various types and techniques of cyber-attacks, incident response and threat hunting lifecycles
• Superior communication skills with the ability to ask questions, escalate roadblocks early, and interact effectively at multiple levels in the organization
• Experience with Logz.io, (or other Elk or Splunk stack based solutions), Exabeam, AWS Security, Google suite, and GCloud a plus

Benefits

• Employee Stock Purchase
• Term Insurance
• Accident Insurance
• Health Insurance
• Training Reimbursement
• Gratuity
• Mobile and Internet Reimbursement
• Team Outings