CLOSED Information Security Operations Engineer

The Information Security Operations Engineer focuses on handling security incidents, forensic investigations, and enhancing our security posture using new and existing technology.

Requirements

• Actively monitor and respond to security incidents and alerts using EDR and similar tools, ensuring timely mitigation and resolution.
• Assist with incident response and system stability issues as they occur.
• Perform detailed forensic analysis on network traffic and logs to detect and trace signs of malicious activities and compromised systems across Windows and Linux environments, especially in cloud platforms.
• Develop and maintain Incident Response and Digital Forensics runbooks, ensuring they are up-to-date and comprehensive.
• Collaborate with IT and engineering teams to refine technology usage and security practices with technologies like SIEM, SOAR, IDS, HIPS, and Active Directory.
• Oversee implementation of defensive practices and countermeasures across infrastructure and applications.
• Continuously improve the incident response program by integrating best practices and lessons learned from past incidents.
• Influence the planning and execution of incident response and postmortem exercises, with a focus on creating measurable benchmarks to show progress (or deficiencies requiring additional attention).
• Serve as a technical point of escalation within the SOC for complex security issues and coordinate multi-team response efforts efficiently across different time zones.
• Foster strong partnerships with various internal teams to enhance the organization's prevention, detection, and response strategies.
• Mentor internal staff and lead by example in both technical and procedural capacities.
• Consistently learn and share advanced skills and practices that promote team excellence. Drive security efficiencies, enabling security team members to work on more advanced tasks.
• Build relationships with key stakeholders to incorporate security principles into engineering design and deployments.
• Conduct and develop tabletop exercises to simulate security incidents and improve team readiness and response capabilities.
• Keep abreast of the latest cybersecurity threats and trends, adjusting defensive measures accordingly.
• Constantly research capabilities of current and new disruptive solutions on the market and make recommendations to security leadership.
• Incorporate security requirements early and throughout project and development lifecycles.
• Implement solutions observing compliance with applicable laws, regulations, and frameworks, such as NIST, ISO 27001, GDPR, etc.
• Participate regularly in change project and change management meetings.
• Perform other duties as assigned.

Benefits

• Generous Paid Time Off
• 401k Matching
• Retirement Plan
• Visa Sponsorship