Security Engineer

This is a fully remote position, open to applicants in Alabama, +16 more states.

📋 Description

• Securely configure business operating environments in accordance with CIS best practices.

• Conduct penetration testing and threat hunting to uncover potential vulnerabilities.

• Monitor and respond to incidents within the Firm’s hybrid environment.

• Maintain current infrastructure by making recommendations and continuously enhancing security technologies.

• Analyze, design, and develop programs, shell scripts, tests, and infrastructure automation capabilities.

• Collaborate with analysts and engineers throughout the organization to enhance cyber resilience.

• Assist in the understanding and development of system requirements and technical solutions for cybersecurity engineering based on system architectures, including CIS Controls, MITRE ATT&CK Framework, and NIST Cyber Security Framework.

• Contribute to the maturation of enterprise architecture to align with information security and organizational risks.

• Create alternative system designs and architectures, taking into account security, operational, functional, and cost trade-offs.

• Identify and establish overall network security requirements.

• Plan, engineer, and oversee network security implementations.

• Aid in the configuration and implementation of network security tools.

• Evaluate and provide solutions for system vulnerabilities, threats, and security challenges.

• Research and identify technologies and processes to enhance overall system security.

• Audit existing network configurations and recommend improvements.

• Perform additional duties as assigned.

⛳️ Requirements

• 2-4 years of experience in on-premises environments with a focus on security.

• 2-4 years of experience in security engineering.

• 2-4 years of experience with Metrics, Events, Logging in a Splunk-like environment.

• Bachelor’s degree in Computer Science, Computer Engineering, Information Systems, or equivalent experience.

• Experience with Microsoft Active Directory and Azure.

• Capability to perform detection engineering to analyze computer logs for anomalous behavior.

• Develop workflows within a SIEM to automate detections and subsequent actions.

• Proven knowledge and experience with scripting languages such as Python and PowerShell.

• Demonstrated knowledge and expertise with common enterprise-grade security solutions.

• Strong verbal and written communication skills.

• Installation of Zoom on a personal cell phone is required by the information security team.

🏝️ Benefits

• Paid time off.

• Sick time off.

• Referral program.

• Medical insurance and benefits.

• Dental insurance.

• Vision insurance.

• Life insurance.

• AD&D insurance.

• ID Theft insurance.

• Long-term disability benefits.

• Short-term disability benefits.

• Parking/Transit reimbursement (varies depending on location).

• 401(k) benefits.

• Employee assistance benefits.

• Flexible work arrangements.

• Remote work option.