Senior Info Security Engineer – Information Security

Job Description: • Implement and configure security tools such as EDR, email security, SOAR, and SIEM • Enable alert use cases aligned with the MITRE ATT&CK framework • Evaluate detection use-case effectiveness and update controls accordingly • Identify control gaps, recommend technologies, and evaluate new tools and vendors • Evolve security controls based on real-world attack strategies • Monitor environments and respond to security detections • Enrich detection data, validate incidents, and prepare post-incident reviews • Brief security leadership on incident-response actions • Implement and maintain cloud visibility and scanning tools • Build cloud scanning and detection methodologies and prioritize findings for remediation • Identify repetitive tasks for automation and use scripting and API integrations to support security operations • Collaborate across IT and security to plan remediation activities • Communicate program status to security leadership and promote security as an enabler Requirements: • Bachelor’s degree in computer science or related field; or equivalent post-high-school education and/or work-related experience • At least 3 years of experience in a security engineer role • At least 3 years of experience implementing SIEM and EDR • Experience with security tools such as Tenable, Qualys, Rapid7, Carbon Black, CrowdStrike, Splunk, Torq, Darktrace, Abnormal, Proofpoint, or Mimecast • Background in vulnerability management, including remediation prioritization • Scripting experience with Bash, Python, or PowerShell • Experience securing regulated environments, including PCI and GDPR • Experience with one or more of vulnerability management, EDR, email security, DLP, edge detection, cloud-native security, SOAR/hyperautomation, or SIEM technologies • Solid knowledge of security risks and threats to large-organization systems and networks • Experience with scripting, programming, and AI-driven automation technologies • Experience designing controls for regulatory compliance such as PCI, SOC, and SOX • Strong problem-solving and analytical skills • Ability to translate complex technical information across organizational levels • Strong relationship-building skills with business stakeholders • Excellent interpersonal, communication, and presentation skills • Preferred certifications include CISSP, CCSP, AWS Certified Security, or Azure Security Engineer Benefits: