Senior Security Engineer – FBG

This is a fully remote position, open to applicants in New York.

📋 Description

• Continuously assess security tools such as Data Loss Prevention, Vulnerability Management, Identity and Access Management, Web Application Firewall, Email Protection, and Endpoint Protection.

• Analyze and implement Security Orchestration, Automation, and Response software.

• Create and maintain scripts aimed at automating threat hunting, detection, and digital forensics activities.

• Design, execute, and enhance security detection systems to boost operational efficiency and observability.

• Oversee a cloud-based SIEM by ensuring the ingestion of relevant logs and tuning alerts appropriately.

• Lead incident response efforts as necessary.

• Stay informed about the latest threats, vulnerabilities, and security trends.

• Conduct security awareness training through internal phishing initiatives.

• Work in collaboration with internal teams to ensure adherence to secure implementation guidelines.

• Participate in an on-call rotation for urgent incident escalations.

• Report directly to the Manager of Security Engineering within the Information Security department.

⛳️ Requirements

• A minimum of 8 years of experience as a security engineer or similar position.

• Expertise in incident response, threat hunting, and cloud security, particularly focusing on AWS.

• Skilled in purple team operations with a strong command of both offensive and defensive strategies.

• Experience with identity management protocols including OAuth, SAML, and OpenID Connect.

• Proficient in automating incident response playbooks utilizing SOAR solutions.

• Familiarity with Cloudflare, Datadog, Wiz, and Tines is preferred.

• Ability to communicate effectively with both technical and non-technical stakeholders.

• Proven track record of drafting documentation such as standards, policies, and architecture diagrams.

• Capability to collaborate effectively within a team environment.

• Demonstrated experience with Infrastructure as Code tools like Terraform or Ansible is advantageous.

• Foundational understanding of agile methodologies with the ability to work collaboratively with multiple stakeholders.

• Experience with scripting languages such as Python or Bash is essential.

• Relevant certifications such as OSCP, SSCP, or GSEC are considered a plus.

• Participation in an on-call rotation providing 24/7 support for critical incident escalations.

• Depending on the role, you may need to participate in in-person interviews or onboarding activities.

🏝️ Benefits

• Full-time employment compensation including a base salary and bonus.

• Benefits information can be found at https://benefitsatfanatics.com/.

• Possible in-person onboarding experience, including "Launching into Better: LIVE" cultural immersion in New York City for full-time, non-seasonal hires.