Security Engineer (Hybrid)
Core
Improve Security Logging & Monitoring Program, reduce dwell time (MTTD&R), and facilitate Incident Detection and Response in AWS cloud and enterprise IT environments.
Role type
SOC Security Engineer (Incident Response & Monitoring)
Builds
SOC monitoring capabilities, automated security playbooks, and incident response workflows
Domain
Cybersecurity, Cloud Security (AWS), SOC Operations
Required skills
SOC monitoring, incident response, cloud SIEM & SOAR, EDR/EPP/MDM operations, threat intelligence analysis, log analysis (Elastic Search, Splunk/SumoLogic), network intrusion detection/prevention, automation scripting
Preferred skills
IaC, data processing, cloud-native security tools
Technologies
AWS, SIEM, SOAR, EDR, EPP, MDM, Elastic Search, Splunk, SumoLogic, Firewalls, IDS/IPS, VPN
Responsibilities
Conduct initial triage of security events and incidents, automate and operate modern security solutions (EDR/EPPs, Firewalls, IDS/IPS), leverage threat intel feeds to sweep environments, prepare status reports and follow up with stakeholders via Jira, facilitate efficient Incident Detection and Response in AWS and enterprise IT environments
Seniority
Mid-level, hands-on IC
