Note: The job is a remote job and is open to candidates in USA. Crum & Forster’s Cyber & Information Security team is hiring a senior engineer/analyst for its Threat Detection and Response team. The role partners with the Managed Services SOC to identify malicious activity, investigate escalated alerts, support incident response, and improve security detection and automation capabilities.
Responsibilities
- Triage escalated Cyber alerts and coordination with internal stakeholders via ticketing
- Investigate email, host, and network-based cybersecurity threats
- Act as a point of contact for company employees reporting cybersecurity concerns
- Identify and recommend opportunities to refine detection capabilities and reduce False Positives
- Coordinate with various system and application owners to verify and remediate cyber threats
- Develop and implement Security Orchestration & Automation
- Develop, Update, and Publish Standard Operating Procedures
- Adhere to, update, and maintain Cybersecurity playbooks
Skills
- 7+ years Cybersecurity related experience in a SOC
- Previous experience working in a Security Operations Center and Engineering roles
- Understanding and maintaining familiarity with threat Intelligence news and Vulnerabilities
- Experience investigating phishing and email related attacks
- Experience with Windows and Linux
- Fundamental understanding of system and network security principles and technology
- Fundamental understanding of Networking – TCP/IP and other protocols
- Ability to interface with a wide audience of technical and non-technical personnel
- Understanding of the Cyber Kill Chain and MITRE/ATT&CK Framework
- Ability to prioritize and manage workloads and deadlines on a tactical and project-oriented level
- Excellent written and verbal communication skills
- Self-starter who is motivated and driven to learn
- Bachelor's degree in a technical discipline or equivalent experience
- Experience, knowledge and improvements of SIEM, SOAR, Email Security, Cloud Security platforms
- Experience with scripting automation in Python or other languages
- Experience in SIEM, IDS/IPS, Firewalls, Endpoint Detection/Response and Email Security
- Experience performing risk assessments, penetration testing and tabletop exercises
- Any Security focused Certifications
- Experience in protecting, investigating and responding to Cloud Security
- Technical writing experience
- Prior experience and/or certifications in AWS, Azure, and/or GCP is desired but not required
- Experience performing risk assessments, penetration testing and tabletop exercises is desired but not required
- Any Security focused Certifications is desired but not required
Benefits
- Generous 401K employer match
- Employee Stock Purchase plan with employer matching
- Generous Paid Time Off
- Benefits beyond health, dental & vision, with programs focused on whole-family wellness, including physical, mental and financial wellbeing
- Career-development learning opportunities, which may include tuition reimbursement, industry-related certifications and professional training
- Dynamic, ambitious, fun and exciting work environment
- Matching donation program
- Volunteer opportunities
- Employee-driven corporate giving program
- Remote work
Company Overview
Company H1B Sponsorship