About the role:
Spearhead the incident response of critical, high-severity, and complex security incidents, drive them to resolution.
Act as an incident commander during critical incidents, managing cross-functional stakeholders (IT, Cloud, Legal, Compliance, and other Business Units).
Lead highly skilled SOC team and act as the critical escalation point while mentoring junior staff, enhance team performance and optimize workflows and processes for maximum efficiency.
Drive operational excellence while advancing the adoption of AI-enabled capabilities within security operations.
Perform advanced threat detection, hunting, and analysis across endpoint, network, and cloud (AWS) environments.
Conduct in-depth analysis of security events, correlating diverse data sources and telemetry to identify sophisticated threats.
Engage in regular threat hunting to uncover hidden threats within the McAfee environment, driving them to closure
Leverage expertise in Microsoft Defender for Cloud Apps (MDCA), and Microsoft 365 Security to detect, investigate, and respond to threats.
Provide executive-level incident summary and post-incident reports (PIRs) with clear root cause and remediation guidance.
Continuously evaluate and recommend improvements in detection logic, automation, and SOC processes and playbooks.
Partner with Threat Intel, Red Team, and Vulnerability Management teams to enrich investigations and strengthen detection capabilities.
About You:
You should have 7-10 years of experience in Security Operations, Incident Response
Experience operating in a fast-paced, product-based organization and supporting a medium- to large-scale technology environment is highly desirable.
Strong hands-on expertise with EDR tools and cloud security including AWS and azure security services
Proven track record in critical incident management, including stakeholder communication and crisis handling.
Deep understanding of detection engineering, threat hunting, malware analysis, and TTPs.
Experience leading cross-functional investigations with IT, Cloud, and Infrastructure teams.
Strong knowledge and experience of SIEMs & SOAR for log analysis and response.
Outstanding knowledge of the Security Operation Center (SOC) & the Information Security Common Body of Knowledge
Experience on Application security and Threat Intelligence is an added advantage.
Exposure or ability to leverage Agentic AI and automation capabilities to detect and respond to security incidents.
#LI-Hybrid
McAfee is a leader in personal security for consumers. Focused on protecting people, not just devices, McAfee consumer solutions adapt to users’ needs in an always online world, empowering them to live securely through integrated, intuitive solutions that protects their families and communities with the right security at the right moment.
We work hard to embrace diversity and inclusion and encourage everyone at McAfee to bring their authentic selves to work every day. We’re proud to be Great Place to Work® Certified in 10 countries, a reflection of the supportive, empowering environment we’ve built where people feel seen, valued, and energized to reach their full potential and thrive.
We offer a variety of social programs, flexible work hours and family-friendly benefits to all of our employees.
We're serious about our commitment to diversity which is why McAfee prohibits discrimination based on race, color, religion, gender, national origin, age, disability, veteran status, marital status, pregnancy, gender expression or identity, sexual orientation or any other legally protected status.