Senior Info Security Engineer – Information Security

This is a fully remote position, open to applicants in United States.

📋 Description

• Implement and configure security solutions including EDR, email security, SOAR, and SIEM.

• Enable alert use cases that align with the MITRE ATT&CK framework.

• Assess the effectiveness of detection use cases and update controls as necessary.

• Identify gaps in controls, suggest technologies, and assess new tools and vendors.

• Adapt security controls based on actual attack strategies.

• Monitor environments and react to security detections.

• Enhance detection data, verify incidents, and conduct post-incident reviews.

• Provide briefings to security leadership on incident-response measures.

• Implement and sustain cloud visibility and scanning tools.

• Develop cloud scanning and detection methods and prioritize findings for remediation.

• Recognize repetitive tasks for automation and utilize scripting and API integrations to enhance security operations.

• Collaborate with IT and security teams to plan remediation efforts.

• Communicate the status of the program to security leadership and advocate for security as an enabler.

⛳️ Requirements

• Bachelor’s degree in computer science or a related field; or equivalent post-secondary education and/or relevant work experience.

• A minimum of 3 years of experience in a security engineering position.

• At least 3 years of experience in implementing SIEM and EDR systems.

• Familiarity with security tools such as Tenable, Qualys, Rapid7, Carbon Black, CrowdStrike, Splunk, Torq, Darktrace, Abnormal, Proofpoint, or Mimecast.

• Experience in vulnerability management, including prioritization of remediation efforts.

• Proficiency in scripting with Bash, Python, or PowerShell.

• Experience in securing regulated environments, including PCI and GDPR compliance.

• Knowledge of one or more areas such as vulnerability management, EDR, email security, DLP, edge detection, cloud-native security, SOAR/hyperautomation, or SIEM technologies.

• Strong understanding of security risks and threats to large organizational systems and networks.

• Experience in scripting, programming, and leveraging AI-driven automation technologies.

• Experience in designing controls to ensure regulatory compliance such as PCI, SOC, and SOX.

• Excellent problem-solving and analytical abilities.

• Capability to convey complex technical information to various organizational levels.

• Strong skills in building relationships with business stakeholders.

• Exceptional interpersonal, communication, and presentation skills.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health, dental, and vision insurance.

• Opportunities for professional development and training.

• Flexible work hours and remote work options.

• Generous paid time off and holiday policies.