Security Engineer - SecOps

Primary Responsibilities/Duties:

• Execute, develop, and document incident management runbooks and processes
• Prepare incident reports of analysis methodology and results. 
• Prioritizes events using existing tools to correlate data for the purpose of reducing false positives and detecting threats
• Analyze and tune security alerts and interpret events, as well as create new signals based on signatures and behavioral activities
• Respond to security incidents, lead investigations, and perform forensics on IT systems as necessary. 
• Assist with implementation of counter-measures or mitigating controls 
• Recognize potential, successful, and unsuccessful intrusion attempts and potential compromises through thorough reviews and analyses of relevant event detail and summary information
• Partner with key stakeholders and communicate effectively to continuously improve the feedback loop of preparation, identification, analysis, containment, and post mortem activities.
• Prepare executive summaries and conduct briefings on significant investigations.

Additional Responsibilities/Opportunities for growth:

• Depending on your skillset and interest level, the following responsibilities are available to all members of the security team.
• Contribute to our Threat Modeling and Threat Assessment efforts
• Partner with engineering teams to promote secure coding practices
• Pentesting and Red Team Operations

Qualifications And Skills

• Expertise in building and operating security information/event management systems (SIEM), centralized logging, and enrichment solutions (Endpoint protection/detection, Network telemetry data, ELK, DataDog, Snowflake, AWS services, HR systems, codebase infrastructure, build infrastructure).
• Expertise with Linux, Windows, and MacOS security and best practices
• Practical experience working with AWS and knowledge of AWS security best practices
• Ability to automate workflows via scripting languages: Python, Go, & Shell
• Superb communication skills and capacity; ability to partner effectively with diverse company stakeholders.
• Active and current knowledge of campaign behavior, trending threats, IoCs, TTPs, and mitigation techniques as blue team operations
• Competency in integrating Threat data, enrichments, for higher-value outcomes and behavioral situational awareness.
• Industry certifications such as GCIH, GCIA, CFCE, GFCA and/or GCFE a plus

Personal Characteristics

• Views security as an enabler, not an inhibitor to innovation
• Results oriented
• High Level of Integrity
• Ownership and Accountability
• High Level of Autonomy
• Clear Communication
• Creative Problem Solver
• Passionate about Security