Security Operations Engineer

Requirements

• Degree in Computer Science, Computer Engineering, Cyber Security, Information Technology or similar experience
• 3+ years of experience in forensics, incident response, or security operations, or related fields
• Strong experience with Linux and MacOS systems, including deep knowledge of system internals, logging, and forensic artifacts
• Experience with Kubernetes and familiarity with securing containerized environments
• Familiarity with modern security tools and platforms such as SIEM, EDR, IDS/IPS, and firewalls
• Strong understanding of network protocols, firewalls, VPNs, proxies, and other security technologies
• Strong analytical skills with the ability to handle and interpret large amounts of data, and the ability to translate these into actionable insights
• Excellent communication and collaboration skills, with the ability to work effectively in high-pressure situations

• We are seeking a highly skilled Security Operations Engineer II specializing in security event triaging and incident response to join our 24x7 Security Operations team based in our Livingston, New Jersey office
• In this role, you will lead initial triaging, escalation and incident response efforts, and contribute to the improvement of our detection and response capabilities
• Be part of a 24/7/365 SOC, that includes a rotating on-call schedule for overnights/weekends
• Investigate security incidents, including creating detections (detections-as-code), analysis, containment, and remediation, ensuring rapid response to potential threats across Linux, MacOS, and Kubernetes environments
• Utilize and query SIEM, EDR, and other security tooling to detect, investigate, and respond to suspicious activity in real-time
• Conduct post-incident reviews, providing insights and recommendations for improving security defenses across engineering, operations and security teams
• Work closely with threat intelligence & detection engineering teams to identify emerging threats and ensure the incident response team is prepared to defend against them
• Mentor and guide junior security engineers and operators, helping to foster a culture of continuous improvement and knowledge sharing
• Stay up-to-date with industry best practices, threat landscape trends, and relevant technologies to continually improve the organization’s incident response capabilities