Information Security Engineer

Information Security EngineerLocation: Charlotte, NC (Hybrid) - Open to Chandler, AZ and McLean, VA Duration: 18 Month Contract W2 ONLY, NO C2COverview:S3 is seeking a Senior Information Security Engineer in Threat Disruptions team within the Advanced Operational Services (AOS) organization.In this role, you will:Review and correlate security logsPlay a major role in phishing disruption efforts, including creation of new logic and procedures to identify phishing attacks impacting customers and employeesLead or participate in computer security incident response activities for moderately complex eventsConduct technical investigation of security related incidents and post incident digital forensics to identify causes and recommend future mitigation strategiesProvide security consulting on projects for internal clients to ensure conformity with corporate information, security policy, and standardsDesign, document, test, maintain, and provide issue resolution recommendations for moderately complex security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint securityUtilize subject matter knowledge in industry leading security solutions and best practices to implement one or more components of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuityIdentify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternativesCollaborate and consult with peers, colleagues and managers to resolve issues and achieve goalsRequired Qualifications:4+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, educationDesired Qualifications:Advanced Information Security technical skillsExperience detecting and mitigating phishing attacks directed towards employees and the company brandExperience creating regular expressions and YARA rulesAbility to manage complex issues and develop solutionsExperience in one or more of the following security disciplines: information security monitoring; incident response; vulnerability management; host/network forensics; cyber-crime investigations; Domain-based Message Authentication, Reporting and Conformance (DMARC); or cyber threat intelligence.Ability to execute in a fast paced, high demand, environment while balancing multiple prioritiesCertifications in one or more of the following: Global Information Assurance Certification (GIAC)Hands-on experience with information security tools such as an enterprise SIEM solution, IDS/IPS, endpoint security solutions, email/web security gateways, and other security detection/mitigation devicesExperience with host and/or network log analysis as applied to incident response / threat huntingKnowledge of offensive security, with the ability to think like an adversary when hunting and responding to incidentsStrong experience in operating system and application security hardening and best practicesStrong investigative mindset with an attention to detailAdvanced problem solving skills, ability to develop effective long-term solutions to complex problems