Information Security Engineer

Job Summary

Working remotely in the US, the full-time salaried Information Security Engineer will investigate security alerts and threat hunting leads, maintain situational awareness of the threat landscape, and collaborate with various teams to protect the organization from data loss and security events.

Key responsibilities

• Correlate SIEM alerts with endpoint activity and network connections to establish incident timelines and identify affected users
• Document incident severity, investigation steps, and recommended actions while following response playbooks and coordinating remediation
• Engage with the Threat Management team to develop and refine detection queries and investigation playbooks

Required qualifications

• Hands-on SOC experience investigating security events across SIEM, EDR, email security, or cloud platforms
• Ability to investigate cloud security events by reviewing identity and access permissions and audit logs
• Working knowledge of TCP/IP, DNS, HTTP/S, and common network services
• 2-3 years of experience in Information Systems or IT security-related functions
• IT degree and/or relevant training preferred