Senior Information Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Implement and configure security tools such as EDR, Email security, SOAR, and SIEM.

• Activate alert use cases in line with the MITRE attack framework.

• Assess the effectiveness of detection use cases and make necessary updates.

• Identify control gaps and suggest technologies to fill them.

• Review potential new tools and vendors.

• Advance security controls based on real-world attack methodologies.

• Monitor environments and react to security detections.

• Enhance detection data and validate incidents with security analysts.

• Conduct post-incident reviews and brief security leadership on response efforts.

• Implement and sustain cloud visibility and scanning tools.

• Develop and execute cloud environment scanning and detection methodologies.

• Prioritize findings for remediation actions.

• Recognize repetitive tasks and automate them for improved efficiency.

• Utilize scripting tools to aid in security tool implementation.

• Leverage API integrations to aggregate tool data.

• Work in collaboration with IT and security colleagues to organize remediation activities.

• Update security leadership on program status.

• Promote a security culture that views security as a facilitator.

⛳️ Requirements

• Bachelor’s degree in computer science or a related field; or equivalent post-high-school education and/or work experience.

• Minimum of 3 years of experience in a security engineer position.

• At least 3 years of experience with implementing SIEM and EDR.

• Familiarity with security tools such as Tenable, Qualys, Rapid7, Carbon Black, CrowdStrike, Splunk, Torq, Darktrace, Abnormal, Proofpoint, or Mimecast.

• Experience in vulnerability management, including the prioritization of remediation efforts.

• Proficient in scripting with Bash, Python, or PowerShell.

• Experience in securing regulated environments, including PCI and GDPR.

• Strong preference for AI-driven automation and scalable security solutions.

• Knowledge of vulnerability management, EDR, email security, DLP, edge detection, cloud-native security, SOAR/hyperautomation, or SIEM technologies.

• Comprehensive understanding of security risks and threats to large organizational systems and networks.

• Experience in scripting, programming, and AI-driven automation technologies.

• Background in designing controls for regulatory compliance such as PCI, SOC, and SOX.

• Strong problem-solving and analytical skills.

• Ability to convey complex technical information at all organizational levels.

• Excellent relationship-building skills with business stakeholders.

• Outstanding interpersonal, communication, and presentation abilities.

• Preferred certifications: CISSP, CCSP, AWS Certified Security, or Azure Security Engineer.

🏝️ Benefits

• Competitive salary and performance-based incentives.

• Comprehensive health insurance plans.

• Opportunities for professional development and certification.

• Flexible work arrangements and a supportive work environment.

• Retirement savings plan with company matching.