Security Engineer, Incident Response

Description

Hybrid 4 Days a week on-site in Burbank, CA

Our client has an opportunity for a Security Engineer, Incident Response on an initial 3-month contract with expected extensions. The role will provide additional coverage while full-time team members are on leave and will focus on investigating and managing third-party security incidents affecting vendors, suppliers, and business partners. The ideal candidate has experience in incident response, security operations, digital forensics, or threat hunting and can assess third-party security events, determine business risk, coordinate remediation efforts, and communicate findings to stakeholders across the enterprise.

Due to client requirements, applicants must be willing and able to work on a w2 basis. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance.

Rate: $55.00 to $63.50/hr. w2

• Investigate and respond to third-party security incidents impacting vendors, suppliers, and partners.
• Perform incident triage, containment, eradication, root cause analysis, and remediation activities.
• Analyze security events through log review, forensic analysis, and other investigative techniques.
• Assess residual risk and recommend appropriate remediation actions.
• Track and document incidents within established security tools and processes.
• Prepare reports, briefings, and presentations for technical and non-technical stakeholders.
• Collaborate with internal Incident Response, Security Operations, and Technology teams.
• Follow established Incident Response procedures and security standards.

• 5+ years of overall IT or technology experience.
• 3+ years of experience in information security.
• Experience in Incident Response, SOC Operations, Digital Forensics, Detection Engineering, or Threat Hunting.
• Understanding of information security principles, network and infrastructure security, web application security, operating systems, networking fundamentals, and incident investigation methodologies.
• Experience performing log analysis and security investigations.
• Strong written and verbal communication skills with technical documentation and report-writing abilities.
• Ability to manage multiple priorities in a fast-paced environment.
• Problem-solving and analytical skills.
• Preferred:
  Python or scripting experience, cloud security across AWS/Azure/GCP, EDR platforms such as Crowd Strike, Sentinel One, Tanium, Cortex XDR, SIEM and/or SOAR solutions, and certifications such as CISSP or GIAC (GCIH, GCFA, GCIA, GCED, GSEC).