Security Engineer II

Overview

As a Security Engineer, you will work directly with our security teams and partners across IT and the Application teams tocontainand remediate security incidents, as well as designing solutions to improve the overall security architecture for the enterprise. Success in this role will bedeterminedby your deep analyticalexpertise, including deep packet analysis, malware analysis,de-obfuscation skills, insights into endpoint analytics, and detailed log analysis. You will be called upon to flex your offensive security skills to drive rapid containment and remediation of security incidents, as well as your interpersonal skills to coordinate response with your teammates.Broad experience with security analyticsincluding host logs, endpoint investigations, and network analysis are critical skills for this role.

Responsibilities

• Collect and analyze key data and telemetry during a security incident.

• Coordinate containment and remediationactivitywith cross-functional teams

• Complete all required incident documentation and reporting within establishedtimeframes.

• Drive improvementsfromincident lessons learned.

• Develop playbook\SOP to improveIncident Response processesto align with industryguidelines and standards.

• Develop and implement security monitoring use cases driven by threat intelligence.

• Conduct periodic threat hunting exercises to actively discover suspicious activity across the enterprise.

• participateinperiodic exercises to testtheeffectiveness ofIR\SOCprocess and controls.

Qualifications

• Bachelor's degree and4 to 6years of experience in Incident Response and SOC.Additional relevant experience and professional certifications will be considered in lieu of a degree.

• Host-based andnetwork security logging.

• Experience inusageofenterprise security solutions.

• Understanding related to security encompassing end point technologies, applications, application hosting, physical and virtual data center hosting.

• Experience with security practices such as security incident response and risk management.

• Excellent verbal and written communication skills with a wide range of audiences including technologists, executives, businessstakeholdersand IT team members.

• Must be a critical thinker with strong problem-solving skills.

• Knowledge of information security management frameworks, such as ISO 27001, ITIL,COBITorNIST.

• High levelof personal integrity, and the ability to professionally handle confidential matters and showan appropriate levelof judgment and maturity.
• Proven ability in security process and organizational design; Current understanding of Industry trends and emerging threats; and knowledge of incident response methodologies and technologies.

Desired Qualification:

• Degree in applicable field

• Professionalinformation securitycertification, suchas GCIA, GCIH, or OSCP

• Knowledge of common security frameworks and regulations including FFIEC, NYDFS and NIST Cybersecurity Framework

• In-depth and hands-on experience with Security Analytics and Incident Response

• Knowledge in Scripting languages (e.g.BASH, Python,etc)