Security Engineer

Job Title

Job Overview Applies comprehensive knowledge and a thorough understanding of concepts, principles, and technical capabilities to perform varied tasks and projects related to incident response Works on complex projects of large scope domestically and internationally Develops technical solutions to a wide range of difficult problems. Solutions are innovative and consistent with organizational goals Completes work independently; receives general guidance on new projects and tasks May act as a mentor to less experienced colleagues Provide an organized and risk-based approach to remediation of sensitive assets in the enterprise Present data findings and influence organizational partners at multiple levels in the organization. Establish strong reporting metrics to support the program and influence behaviors. Act as liaison with solution owners and IT groups to ensure alignment of our strategy. Strong analytical, collaborative, problem solving, organizational and planning skills. Proficient PC skills including working knowledge of Microsoft Office products.

Skills Significant experience with endpoints (laptop/desktop/server) related to cyber security Significant experience with incident response case management and automation Scripting and programming skillset within a cyber command center/security operations center Extensive work with Incident Response toolsets including, but not limited to next generation endpoint, automation, incident management, firewalls and cloud software/infrastructure. Familiarity with SIEM technologies and utilization within a cyber security environment Familiarity with Cyber Kill Chain/Mitre Telecommunication and CK frameworks and application within a cyber security command center Familiarity with logging/monitoring solutions and implementations Familiarity with agile methodology, sprint planning and daily scrum meetings

Education Bachelors or masters degree in related field or equivalent work experience Strongly preferred 5+ years experience in related field preferred CISSP or equivalent certifications preferred, but not required User acquired intelligence to develop and implement correlation use cases in Splunk and Splunk ES is a major plus.