Senior Information Security Engineer

Responsibilities

• Performs intrusion scope and root cause analysis
• Assists in containment and remediation actions
• Serves as an escalation point for Cyber Fusion Center analysts
• Supports Purple Team engagements as a subject matter expert
• Conducts proactive Threat Hunting exercises based on relevant threat intelligence
• Works collaboratively with members from other Security Operations teams to drive Incident Response/Threat Hunting and overall program maturity
• Conducts legal holds/forensic analysis across multiple operating systems as required
• Serves as a Subject Matter Expert in Incident Response, guides technical and non-technical teams through the Incident Response lifecycle while driving containment, remediation, and lessons learned management
• Serves as the technical lead during Incident Response engagements
• Briefs Cybersecurity Leadership team throughout incidents

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science preferred
• 7+ years of technology, information security and/or application security experience
• Expert in top security flaws and resolutions as listed by OWASP, SANS etc.
• Strong experience with automation, automated runbooks, and ability to support the automation of high fidelity processes
• Expert with SIEM, EDR, and other event correlation technologies
• Experience with AI, generative and agentic, preferred
• Strong experience across multiple Operating Systems
• Knowledge of modern web and mobile applications frameworks and their security requirements
• Knowledge of network architecture, protocols, and standards
• Knowledge of Web Application Firewalls, SSL/TLS, Forward and reverse proxies
• Knowledge of security considerations around virtualization and cloud applications
• Experience with incident response, forensics and evidence preservation
• Ability to communicate technical security requirements to technical and non-technical personnel
• Ability to collaborate with technical and vendor personnel, cloud service providers
• Available off-hours/on-call to handle occasional incidents and escalations
• Applicants must be currently authorized to work in the United States on a full-time basis