Note: The job is a remote job and is open to candidates in USA. The employer is seeking a Security Engineer to support enterprise cybersecurity environments and technologies. The role focuses on designing, developing, deploying, and maintaining security automations, custom tools, workflows, and scripts while supporting security platforms, incident response, and operational functions remotely.
Responsibilities
- Assist in the planning, design, development, deployment, administration, and operational support of enterprise security automations and custom security tools
- Develop automated workflows for alert enrichment, triage, incident response, case management, notifications, containment, escalation, and reporting
- Support a broad range of security platforms, including DSPM, ASM, IAM, vulnerability management, email security, endpoint security, SIEM, XDR, SOAR, logging, monitoring, network security, cloud security, and threat intelligence technologies
- Develop, test, deploy, and maintain automated security workflows, applications, and scripts using Python, PowerShell, Bash, REST APIs, JSON, YAML, and vendor SDKs
Skills
- * 5 years of experience in supporting large IT environments, security systems, software development, and/or system deployments
- * Broad hands-on security engineering experience supporting multiple cybersecurity technologies, systems, integrations, and operational functions
- * Experience developing security automations, scripts, integrations, utilities, and custom tools using Python
- * Strong experience troubleshooting complex technical issues across applications, security platforms, operating systems, networks, identity services, and integrations
- * Linux system deployment, configuration, patching, scripting, service management, monitoring, troubleshooting, and lifecycle management
- * Experience developing automation and response workflows using Python, PowerShell, Bash, REST APIs, JSON, YAML, and vendor SDKs
- * Bachelor's degree in an Information Technology, Computer Science, Software Engineering, or Information Security related field; 8 years of relevant work experience may be substituted in lieu of education
- * Hands-on experience serving as a security engineering generalist in a large, multi-tenant, shared-services, or managed-service environment
- * Hands-on Linux, Docker, security sensor, monitoring, scripting, and platform administration experience
- * Experience supporting SOC analysts, security engineers, incident responders, agency customers, and rapidly changing operational priorities
- * Familiarity with Palo Alto Networks, Proofpoint, Tenable, Cribl, WUG, or other enterprise security technologies and experience developing playbooks, runbooks, procedures, and technical documentation
- * Experience supporting IAM, DSPM, ASM, vulnerability management, email security, endpoint security, SIEM, SOAR, logging, monitoring, cloud security, and other enterprise security technologies
- * Strong understanding of enterprise security architecture, incident response, networking, access control, secure software development, systems administration, and industry-standard cybersecurity frameworks
- + CISSP, Security+, GIAC, or other relevant cybersecurity certification
- + Linux, Python, Cloud, IAM, or other relevant security engineering or platform certification
Benefits
- A generous array of benefits, depending on the length of assignment.
- Referral bonus of up to $1,000.
Company Overview
Company H1B Sponsorship