Security Operations Engineer

Posted 5ds ago

Employment Information

Education
Salary
Experience
Job Type

Report this job

Job expired or something wrong with this job?

Job Description

Security Operations Engineer monitoring security alerts and working with senior engineers to protect data. Investigating suspicious activities and refining defensive posture within a cybersecurity team.

Responsibilities:

  • Monitor security alerts and triaging potential threats.
  • Review and analyze reported suspicious emails.
  • Perform header analysis, URL sandboxing, and attachment detonation to identify malicious intent.
  • Monitor DLP consoles for unauthorized movement of sensitive data.
  • Investigate incidents involving PII or intellectual property.
  • Investigate potential Account Takeover (ATO) alerts.
  • Monitor the SIEM for alerts across endpoints, networks, and cloud environments.
  • Assist in routine scans and ensure security agents are healthy and reporting correctly across the fleet.

Requirements:

  • Bachelor’s degree in Cybersecurity, Computer Science, IT, or equivalent experience/certifications.
  • Foundational understanding of the TCP/IP stack and common protocols (HTTP, DNS).
  • Familiarity with macOS, and Linux operating systems.
  • Ability to correlate disparate data points to identify patterns of malicious behavior.
  • Strong written skills for documenting incident findings and communicating with employees regarding security policy.
  • A "student of the game" mentality—staying up to date with the latest threat actor TTPs (Tactics, Techniques, and Procedures).

Benefits:

  • Exceptional health, vision, and dental care
  • Opportunity for equity ownership
  • Life and AD&D, short- and long-term disability
  • Employee Assistance Program
  • Employee Resource Groups
  • Fun company outings and events
  • Unlimited PTO
  • 401K with company match