Identity Threat Detection And Response

Identity Threat Detection And Response Cybersecurity Jobs

3 jobs found

Today

Senior IT Security Analyst

Advanced Energy Industries, Inc. Denver, CO

Denver, CO

Today

$110k - $150k/yr Full time Senior Cloud Platforms Identity and Access Management

Apply Now

Job Description

Lead enterprise IAM and identity security modernization across global cloud and SaaS environments from the Corporate Headquarters in Denver, CO.

Responsibilities

Design, implement, and maintain enterprise Identity and Access Management (IAM) solutions for workforce, privileged, and application identities
Integrate, administer, and optimize enterprise IAM platforms
Define IAM architecture standards, design patterns, and technical roadmaps aligned to business and security objectives
Build scalable identity solutions supporting cloud-first and hybrid environments
Assess emerging IAM technologies and industry best practices to strengthen security posture
Lead programs across Identity Governance and Administration (IGA), Access Management, Privileged Access Management (PAM), Identity Threat Detection and Response (ITDR), and Zero Trust
Design and implement identity lifecycle management including provisioning, deprovisioning, role management, and access certification activities
Develop and maintain authorization models using RBAC, ABAC, and PBAC
Support segregation of duties (SoD), least privilege, just-in-time access, and privileged account governance programs
Administer and enhance authentication services such as SSO, MFA, passwordless authentication, federation, and conditional access
Manage on-premise, cloud, and hybrid identity environments
Configure Identity Protection policies and Conditional Access controls, including risk-based authentication and adaptive access capabilities
Design and maintain integrations between identity platforms, cloud services, and business applications using APIs, provisioning connectors, and automation frameworks
Implement secure identity integrations for Microsoft Azure, AWS, and Google Cloud Platform and associated enterprise apps and SaaS
Partner with application owners and development teams to ensure consistent authentication and authorization controls
Support application onboarding, federation, provisioning, and access governance activities
Develop automation solutions using PowerShell, Python, SQL, Power Automate, or similar tools to reduce manual effort and improve efficiency
Create and maintain technical documentation, architecture diagrams, operational procedures, and support runbooks
Recommend and implement process improvements that enhance security, user experience, and operational effectiveness
Act as a senior IAM subject matter expert and trusted advisor to Information Security, IT, Audit, Compliance, and business stakeholders
Lead technical projects from planning and design through deployment and operational transition
Mentor junior employees and provide technical guidance across IAM initiatives
Support audit, compliance, and regulatory activities by implementing controls and providing required evidence
Participate in identity-related incident response and root cause investigations
Stay current on IAM threats, technologies, and industry trends
Perform other duties as assigned

Requirements

Advanced knowledge of IAM, including IGA, PAM, authentication, authorization, and identity lifecycle management
Strong understanding of modern identity security, including Zero Trust, least privilege, adaptive authentication, risk-based access controls, continuous access evaluation, and ITDR
Advanced knowledge of on-premise, cloud, and hybrid identity environments
Strong understanding of authentication, federation, and directory protocols: SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), LDAP, Kerberos, RADIUS, SCIM
Knowledge of access control frameworks: RBAC, ABAC, PBAC
Strong analytical and problem-solving skills to diagnose and resolve complex technical issues
Excellent verbal and written communication skills for technical and non-technical audiences
Strong organizational and project leadership skills; ability to manage multiple priorities
Demonstrated ability to influence stakeholders and collaborate across cross-functional teams
Ability to develop and maintain technical documentation, standards, procedures, and operational runbooks

Technologies

Identity and Access Management (IAM), Identity Governance and Administration (IGA), Privileged Access Management (PAM), Identity Threat Detection and Response (ITDR)
Zero Trust, RBAC, ABAC, PBAC
SSO, MFA, passwordless authentication, Conditional Access, Identity Protection policies
APIs, provisioning connectors
PowerShell, Python, SQL, Power Automate
Microsoft Azure, AWS, Google Cloud Platform
SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), LDAP, Kerberos, RADIUS, SCIM

Benefits

Medical with multiple plan options
Short and long-term disability and life insurance
Health savings and flexible spending accounts
Generous time off: 3 weeks paid vacation, 7 days paid sick time, 12 paid holidays
8 hours of paid volunteer time off
8 weeks of paid parental leave for both parents
Company matched 401(k)
Tuition reimbursement
Expanded mental health coverage and employee assistance programs
Voluntary benefits: critical illness, accident and hospital indemnity, pet insurance, identity theft, and legal assistance

Work Environment

On-site in Denver, Colorado at Corporate Headquarters
Standard office environment

Preferred Qualifications

Knowledge of regulatory and compliance frameworks: SOX, NIST, ISO 27001, and CIS Controls
Familiarity with IT and Security platforms or applications within Customer Relationship Management (CRM), Zero Trust, and other enterprise product families
Understanding of cloud security architectures across Azure, AWS, and Google Cloud Platform

Experience

Seven (7) or more years in Identity and Access Management, Cybersecurity Engineering, Information Security, or a related technical discipline
Five (5) or more years administering and supporting enterprise IAM platforms and access management processes
Three (3) or more years supporting on-premise, cloud, and/or hybrid identity directory services in a medium to large enterprise environment
Experience implementing and supporting IGA and PAM solutions
Experience administering enterprise authentication solutions including SSO, MFA, federation services, and conditional access policies
Experience integrating identity platforms with cloud providers, enterprise applications, and SaaS solutions
Experience designing and implementing user provisioning, deprovisioning, access reviews, role management, and access certification processes
Experience developing automation solutions using PowerShell, Python, SQL, Power Automate, or similar technologies
Experience leading technical projects from planning and design through implementation and operational support
Experience collaborating with Information Security, Infrastructure, Application Development, Audit, and business stakeholders to deliver IAM solutions

Preferred Experience

Experience with IAM platforms and technologies
Experience supporting global or manufacturing organizations
Experience supporting regulatory audits, compliance initiatives, and remediation activities
Experience implementing Zero Trust, PAM, or enterprise IAM modernization programs

Preferred Certifications

Microsoft Certified: Identity and Access Administrator Associate (SC-300)
Microsoft Certified: Cybersecurity Architect Expert (SC-100)
Certified Information Systems Security Professional (CISSP)
Certified Identity and Access Manager (CIAM)
Certified Identity Management Professional (CIMP)
Additional cloud, cybersecurity, or identity management certifications relevant to the role

Education

Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Engineering, or a related field; or an equivalent combination of education and experience

View full job page →

14d ago

Lead Identity Security Engineer

Cognizant New York, NY

New York, NY

14d ago

$115k - $134k/yr Full time Manager Senior Cloud Identity Security

Apply Now

Job Description

In this Lead Identity Security Architect role, you will direct enterprise Identity Security efforts across IGA, ITDR, PAM, and Policy-Based Access Control (PBAC). The position emphasizes architecture, integration, and operationalization of identity risk detection and response capabilities using leading identity security platforms.

Location

New York, NY (onsite)

Responsibilities

Lead enterprise Identity Security initiatives spanning IGA, ITDR, PAM, and PBAC capabilities.
Define and execute the Identity Security strategy, roadmap, architecture, and implementation approach in alignment with business and security objectives.
Provide architectural oversight and technical leadership for SailPoint Identity Security Cloud (ISC), CrowdStrike Identity Protection, and related Identity Security platforms.
Design and implement identity risk signal integrations across SailPoint ISC, CrowdStrike Identity Protection, Active Directory, Microsoft Entra ID, PAM solutions, and existing security platforms.
Develop and operationalize identity threat detection and response to surface account compromise, privilege escalation, lateral movement, insider threats, and credential abuse.
Lead detection engineering, including use case design, correlation logic, monitoring content development, alert tuning, and optimization.
Drive SIEM integrations to improve identity-centric threat analytics, monitoring, dashboards, and threat-hunting capabilities.
Establish workflow automation, orchestration, and response mechanisms to accelerate identity-related incident remediation.
Support PBAC model implementation, including access governance frameworks, entitlement management, and risk-based access controls.
Lead PAM onboarding, integration, governance, monitoring, and operational processes for enterprise privileged accounts.
Partner with executive stakeholders and governance forums to deliver program updates, risk visibility, and strategic guidance.
Create and maintain operational runbooks, playbooks, architecture documentation, testing plans, and transition-to-support deliverables.

Requirements

8+ years of experience in Identity & Access Management (IAM), Identity Governance, Cybersecurity Architecture, or Identity Security Engineering.
Deep expertise in SailPoint Identity Security Cloud (ISC) implementation, integration, governance, and access lifecycle management.
Hands-on experience with CrowdStrike Identity Protection and ITDR capabilities, including identity risk monitoring.
Strong understanding of Privileged Access Management solutions such as CyberArk, BeyondTrust, Delinea, or equivalent.
Experience implementing identity security controls using SAML, OAuth 2.0, OpenID Connect (OIDC), SCIM, and modern federation protocols.
Expertise in identity threat detection, incident response, threat hunting, and security monitoring use case development.
Experience integrating IAM, IGA, PAM, Active Directory, Entra ID, and SIEM platforms in enterprise environments.
Strong knowledge of policy-based access control, role management, identity governance, and compliance requirements.
Experience delivering in Agile environments and leading cross-functional security transformation initiatives.
Excellent stakeholder management, executive communication, technical leadership, and governance experience.
Relevant certifications in SailPoint, CyberArk, SC-300, CISSP, CISM, or equivalent identity and security technologies are highly desirable.

Technologies

SailPoint Identity Security Cloud (ISC)
CrowdStrike Identity Protection
Privileged Access Management (CyberArk)
BeyondTrust
Delinea
SAML
OAuth 2.0
OpenID Connect (OIDC)
SCIM
Active Directory
Microsoft Entra ID
SIEM
CyberArk
SC-300
CISSP
CISM

Compensation

The annual salary for this position is USD 114,500 - 134,000, depending on experience and other qualifications. This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and subject to the terms of Cognizant’s applicable plans.

Benefits

Medical/Dental/Vision/Life Insurance
Paid holidays plus Paid Time Off
401(k) plan and contributions
Long-term/Short-term Disability
Paid Parental Leave
Employee Stock Purchase Plan

Application Deadline

Applications will be accepted until 30 Sep 2026.

View full job page →

1mo ago

Security Engineer

Beazley Security Remote 🌍 Remote

Remote

1mo ago Closed

Full time Cybersecurity Tools Endpoint Security Engineer

This position is no longer accepting applications (closed Sep 10, 2026).

Job Description

Beazley Security is looking for a Security Engineer to help run and improve the operational backbone of the SOC’s detection technology. In this role, you will own core Endpoint Detection and Response (EDR) and Network Detection and Response (NDR) platforms, ensuring reliable coverage across the enterprise estate and enabling the SOC to act with better visibility and alert quality.

Working remotely, you will combine platform engineering and security operations to maintain detection telemetry health, optimize detection logic, and support incident investigations end to end. Beazley Security also offers flexible working arrangements, robust benefits, and opportunities for ongoing training and career advancement.

What you’ll do

Act as the technical owner for SOC systems and operations, maintaining full operational coverage and enterprise integration.
Maintain physical and virtual infrastructure for EDR/NDR components, including appliances, sensors, collectors, and required upgrades or configuration changes.
Oversee policy, sensor deployment, and version control for EDR/NDR agents and connectors.
Validate data flow and health between endpoints, appliances, and the central XDR platform used by the SOC.
Coordinate with the SOC, vendors, and IT infrastructure teams to schedule upgrades, patching, and feature enablement.
Tune detection logic, behavioural models, and response policies to improve threat visibility and reduce false positives.
Implement NDR optimisation enhancements such as target model tuning, device tagging, and subnet labelling for faster investigations.
Maintain EDR configuration baselines and analytics dashboards.
Support integration and data quality within the Beazley Security XDR platform to ensure dependable event correlation.
Document configuration changes, tuning decisions, and engineering work in line with IT Security change management processes.
Collaborate with the SOC to ensure the right visibility, alert quality, and context for first-line detection and triage.
Join the escalation group for security cases from the centralized SOC and support containment or isolation activities when needed.
Provide subject-matter expertise on EDR/NDR telemetry during investigations and post-incident reviews.
Support root-cause analysis and recommend platform-level improvements following potential incidents.
Partner with Threat Intelligence and the MDR organization to proactively hunt for malicious activity and validate emerging TTPs.
Feed newly identified patterns back into SOC detection content and threat models.
Produce operational and executive reporting across managed detection platforms.
Participate in recurring technical optimisation sessions and quarterly business reviews with vendors.
Track detection efficacy, platform uptime, and configuration drift metrics as part of the IT Security KPI set.
Continuously assess opportunities for automation, enrichment, and process improvement.

What you bring

Minimum 3 years experience in security operations, cyber engineering, or platform management.
Hands-on experience administering and optimising leading NDR and EDR platforms.
Strong understanding of endpoint telemetry, network analytics, and SOC workflows.
Experience planning and performing platform upgrades, integrations, and lifecycle management.
Familiarity with MITRE ATT&CK and threat-hunting principles.
Ability to collaborate with SOC analysts, infrastructure teams, and vendors.
Excellent documentation, analytical, and communication skills.

Technologies you’ll work with

EDR, NDR, XDR, MITRE ATT&CK, SQL, PowerShell, Python, Identity Threat Detection & Response (ITDR)

Benefits

Competitive salary and bonus.
Flexible working arrangements.
Generous leave policies including 3 months paid parental.
100% of employee-only insurance premiums covered (healthcare, dental and vision).
Up to 5% matched 401k contribution.
Opportunities for career advancement and ongoing training.
Participation in industry conferences and events.

Desirable skills

Experience working within hybrid SOC models (internal plus managed service).
Exposure to ITDR solutions.
Certifications such as CySA+, GCIA, or equivalent.
Scripting or query language capability (SQL, PowerShell, Python).

How you work

Highly organised and proactive, with strong ownership of assigned technologies.
Analytical approach to improving systems and processes.
Collaborative and approachable, bridging operations, engineering, and intelligence teams.
Calm under pressure, with a methodical and disciplined approach to incident support.

Key interfaces

Internal: Head of IT Security, SOC Manager, Incident Response, Infrastructure, Cloud, and Networking teams.

External: Beazley Security MDR SOC

View full job page →

Identity Threat Detection And Response Cybersecurity Jobs

Senior IT Security Analyst

Lead Identity Security Engineer

Security Engineer

Get Identity Threat Detection And Response Cybersecurity Jobs alerts