Security Engineer
Skills
Detection EngineeringSecurity AutomationEndpoint SecurityLog AnalysisMacActive DirectoryServicenowSaas SecurityCommand LineE-DiscoveryOffice 365Network OperationsAzure AdIncident ResponseCloud InfrastructureLinuxIdentity ManagementFirewallOrchestrationAzureVulnerability ManagementEdrMdmSqlPhishing PreventionSecure ArchitectureCitrixAuthentication ProtocolMicrosoft SentinelNetwork EngineeringSecurity Event TriageEvent AggregationSiem TuningPhishing ResponseForensicsExchangeSiemWindowsThreat IntelligenceThreat HuntingSystem Hardening
About the Role
You will design and implement security solutions across physical, virtual, and cloud environments. Using your expertise in cybersecurity and knowledge of common attack vectors, you will enhance visibility, threat correlation, and incident response capabilities throughout the technology landscape. As a key contributor to the cloud-first strategy, you will play a critical role in shaping and advancing the overall security posture. You will investigate security events, help detect and remediate incidents, build automation to reduce alert-to-fix time, and collaborate across teams to improve security posture and risk remediation.
Requirements
- Bachelor's degree in Cybersecurity, Engineering, or a related field; or equivalent experience
- 5+ years of experience in Security Engineering or Security Operations
- Experience with incident response, security event triage, investigations, forensics, and fluency with endpoint operating systems (Windows/Mac/Linux) and command line tools
- Experience with log analysis, event aggregation, security event data management, SIEM tuning, and Microsoft Sentinel
- Experience with security automation and orchestration and threat intelligence utilization
- Experience with e-discovery tools and processes
- Experience responding to phishing, scam, and imposter campaigns
- Experience with endpoint security tooling and MDM solutions
- Network engineering, secure architecture, and network operations (firewalls, switches, etc.)
- Cloud infrastructure operations and architecture (Azure a plus)
- Identity management and authentication protocols
- Remediation strategies, system hardening, and vulnerability management
- Experience with enterprise information technology, including Active Directory/Azure AD, Exchange, Office 365, servers (Windows, SQL/DB, Linux, VM, Citrix, App, Web), device/asset management, and ServiceNow
- Experience with posture and threat management of third-party SaaS platforms
- Technical understanding of enterprise EDR tools
Responsibilities
- Investigate and contextualize security events from numerous data sources
- Help detect, respond to, and remediate security events and incidents
- Create automated data correlation and triage processes to reduce alert-to-fix time
- Develop remediation and orchestration efficiencies across the security stack, including endpoint, network, identity, and application
- Perform e-discovery tasks in support of Legal and HR investigations
- Respond to user requests for security-related issues and concerns
- Improve current visibility by configuring existing logging and alerting policies
- Evaluate and select additional tools and services
- Contribute to SIEM tuning for reliable alerting
- Perform vulnerability triage and assignment
- Engage in proactive threat hunting to identify risks not automatically captured by scans
- Contribute to all security-related initiatives, both tactical and strategic
- Serve as a subject matter expert on information security-related escalations
- Maintain awareness of trends in various security domains
- Collaborate with other teams to improve security posture, risk remediation, and threat awareness