Remote Software Engineer, Security

Description:

• As a Security Operations Engineer, you will lead efforts to identify, analyze, evaluate, and act upon security risks and threats.
• You will monitor and analyze security alerts and incidents to identify potential threats promptly.
• Investigate security incidents utilizing various tools and technologies and coordinate with cross-functional teams for incident response activities.
• Develop and implement incident response plans to enhance organizational resilience and create incident reports for applicable incidents.
• Configure and integrate log sources into Splunk Cloud, create dashboards for various use cases, and maintain log management strategies.
• Stay current with the latest cybersecurity threats and vulnerabilities, review threat intelligence reports, and collaborate with internal teams and external partners to share notable incidents and improvements.
• Mentor other team members about Security Operations work and participate in cross-functional training exercises and simulations.

Requirements:

• Must have at least 5 years of solid experience in incident response.
• Experience in Splunk or Splunk Cloud administration/Engineering (integration of log sources, use case creation).
• Experience in responding to phishing, malware, and denial of service (DoS) attacks.
• Experience in SIEM, log reviews and analysis, and integration of log sources.
• Must be self-motivated, quality-oriented, and able to work with the guidance of the Security Operations Manager.

Benefits:

• Flexible paid vacations and observed holidays.
• Flexible working arrangements to accommodate work-life balance.
• Health insurance coverage for employees and dependents.
• Mental health and wellness programs including Wellness Wednesdays and well-being coaching.
• Learning and development opportunities through curated learning programs.
• Company laptop provided for employees and tech support for high productivity.