Security Engineer
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Security Engineer operating 11:11 Systems’ global SOC. Building SIEM/SOAR detections, supporting incident response, and improving customer security operations.
Responsibilities:
- Support SOC Management in setting tactical and operational goals and developing policies and procedures for security event detection, assessment, reporting, and response
- Develop and fine-tune detection rules, correlation logic, and automation workflows across SIEM and SOAR platforms
- Serve as customer-facing escalation support for issues and security incidents escalated from Tier 1 and Tier 2 SOC Analysts
- Provide first-responder incident response advisory support for clients within the scope of 11:11 Systems' software and systems
- Own the timeliness and accuracy of critical incident identification, advisement, and reporting internally and to customers
- Lead and support process improvement initiatives to advance operational objectives, drive efficiencies, and improve KPIs
- Drive implementation and continuous improvement of technologies, capabilities, frameworks, and methodologies
- Develop and maintain customer-facing security stacks including SIEM, EDR, SOAR, WAF, and vulnerability scanning, and architect technical improvements
- Troubleshoot network connectivity and infrastructure issues affecting the Security Operations Team
- Advise on and help build SOC analyst training programs and provide cross-functional training
- Monitor emerging threats, risks, and exploits and translate knowledge into updated SIEM detection rulesets
- Support service delivery with pre-production reviews for newly onboarded SIEM and EDR customers
- Participate in an on-call rotation for after-hours support
- Work in alignment with 11:11 Systems' Code of Business Ethics and Company Values, including responsible data handling and required compliance training
Requirements:
- 5+ years in information security, including 3+ years in information technology
- 3+ years' experience with SIEM, EDR, SOAR, and/or vulnerability scanning tools, with focus on Azure Sentinel, Cortex XDR, and Tenable
- Analyst-level experience in the telecom and/or enterprise cybersecurity industry
- 1+ years' experience with Python scripting or development
- 1+ years' experience with Linux administration and troubleshooting
- Strong understanding of TCP/UDP/IP networking, packet analysis, and networking protocols
- Experience with enterprise security architecture, detection, and response
- Mature understanding of industry-standard incident response practices and SOC operations
- Experience building Azure Sentinel use cases, analytics rules, and workbooks, including KQL query development
- Experience with Kubernetes
- Experience with Palo Alto products, including Cortex XDR, Panorama, and next-generation firewalls
- Experience with ThreatX or similar WAF platforms
- Active certifications such as Security+, CySA+, CASP+, CISSP, and/or GCIH
- Working knowledge of security frameworks such as ISO, NIST, and CIS
- Familiarity with Intelligence Driven Defense, Cyber Kill Chain, and/or MITRE ATT&CK
- Up-to-date knowledge of attacker tactics, techniques, and procedures
- Excellent communication, problem-solving, and interpersonal skills for customer- and team-facing work
- Must be a US Citizen and legally eligible to work in the US without visa sponsorship
- Ability to perform each essential function satisfactorily; reasonable accommodation may be made for qualified individuals with disabilities
Similar Jobs
Security Engineer
Security Engineer strengthening 11:11 Systems’ global SOC through SIEM, SOAR, and incident-response engineering. Supporting customer security operations, detection improvements, and escalations.
Security Engineer
Security Engineer strengthening 11:11 Systems' global SOC through SIEM, SOAR, and incident response. Supporting customer escalations, detection engineering, automation, and 24/7 security operations.
Senior Specialist, Microsoft Cloud & Security
Especialista sênior projetando e sustentando ambientes Microsoft 365, Azure e identidade híbrida. Protegendo dados, resolvendo incidentes críticos e conduzindo projetos corporativos.
Information Security Access Specialist
Information Security Access Specialist securing employee access for GR8_TECH’s B2B iGaming platforms. Automating IAM workflows, RBAC governance, and AI-assisted access operations.
Application Security Consultant
Application Security Consultant assessing customer applications for vulnerabilities at DirectDefense, a cybersecurity services provider. Conducting dynamic testing, static code reviews, and remediation guidance.
Information Security Consultant
Information Security Consultant delivering GRC assessments, frameworks, and compliance advisory for Cognisys clients. Translating security requirements into practical improvements across diverse industries.
DevSecOps Engineer, Security Compliance
DevSecOps Engineer securing SAP delivery for federal clients. Automating deployments, vulnerability checks, controls, and authorization evidence.
Regional Security Manager
Regional Security Manager protecting Saab’s defence and security operations across Southern Africa. Coordinating personnel, risk, compliance, crisis response and regional security strategy.
Principal Security Architect
Principal Security Architect owning cloud and application security for Lilly’s AWS-heavy strategic programs. Protecting trade secrets through architecture reviews, threat modeling, and risk governance.
Senior Security Architect
Senior Security Architect designing scalable cybersecurity solutions for Humana’s healthcare insurance and CenterWell services. Supporting cloud, application, risk, compliance, automation, and acquisition integration initiatives.
Managing Engineer – Data Security Engineering
Managing Engineer leading Allstate’s data security engineering team. Building automated DLP, data intelligence, and data access controls for insurance operations.
SAP Security Consultant – AMS
SAP Security Consultant administering roles, authorizations, and access governance for DyFlex clients. Supporting audits, SoD analysis, GRC, upgrades, and managed SAP environments.
Senior Security Engineer, Customer Transparency
Senior Security Engineer improving customer transparency for Tanium’s AI-powered endpoint management and security platform. Managing vulnerability disclosure, SBOM visibility, bug bounty operations, and security advisories.
Técnico/a de Seguridad, PAM – CyberArk
Técnico/a PAM CyberArk administrando cuentas privilegiadas, credenciales y Safes. Soporte de servicios gestionados de ciberseguridad para un cliente financiero de Logicalis Spain.
Domain Lead – Transformation, Cybersecurity Strategy Adoption
Cybersecurity transformation lead embedding policies, change management, and security adoption across SNCB/NMBS. Driving workforce engagement and governance for Belgium’s national railway.
Senior IT Systems, Security Engineer
Senior engineer implementing secure identity, endpoint, cloud, and network systems for Defense Unicorns’ federal and enterprise customers. Supporting compliance-ready software delivery and cybersecurity operations.
IT Systems, Security Engineer
IT Systems & Security Engineer implementing and securing customer IT environments for Defense Unicorns. Configuring identity, endpoints, networks, compliance controls, and automation.
Senior Security Engineer
Senior Security Engineer securing Redox’s cloud-native healthcare data interoperability platform. Hardening Kubernetes, containers, infrastructure, and application security across U.S.-based remote engineering teams.
Mid-Level Information System Security Officer, ISSO
ISSO owning cybersecurity posture and RMF compliance for systems supporting a large federal agency. Leading assessments, continuous monitoring, POA&M remediation, and authorization readiness.
Cyber Security Engineer
Cyber Security Engineer protecting HBK’s global enterprise IT environment. Securing cloud, network, endpoint, identity, and AI systems for a global test and measurement leader.