Advanced Security Engineer - Gov

Description

The role protects the company's network and infrastructure by investigating new threats to its systems, identities, and clients.

You will work with senior cyber specialists to predict and reduce emerging threats using advanced tools and newer detection capabilities.

The work is hybrid.

Responsibilities

• Review and triage alerts, and analyze log data from many sensors, correlated signatures, and threat intelligence feeds.
• Judge how serious a security event is using host, cloud, and network evidence, and escalate incidents with clear next steps.
• Serve as the first escalation point for security events and see each investigation through to closure.
• Analyze correlated logs and alerts from many devices in near real time, focusing on which events are real security incidents.
• Actively search collected telemetry to find advanced threats that get past existing controls.
• Help write incident handling policies and procedures that meet global industry standards.
• Keep researching new threats and put suitable countermeasures in place in a fast-changing environment.
• Act as the subject matter expert on how malicious activity works and what it does.
• Tune alerting on an ongoing basis and coach junior team members in detection engineering.
• Maintain security infrastructure and keep tool configurations current.
• Join other projects when needed.

Requirements

• At least 3 years in incident response, security operations center work, incident analysis, or computer forensics.
• Strong incident response skills, such as network forensics, memory forensics, or packet analysis.
• Working knowledge of TCP/IP, network services, cryptography, and web application attacks.
• Ability to work with a cross-functional team to reach high-level goals and help strengthen the company's security posture.
• Understanding of the methods and tools attackers use to reach private systems and data.
• Ability to independently set priorities across complex events.
• Understanding of how infections spread, how malware behaves, how exploits work, and which controls reduce them.
• Required skills: access management, firewalls, intrusion detection, network security, security architecture design, security audit, security information and event management (SIEM), security operations, and vulnerability management.
• Preferred: a bachelor's degree or equivalent professional or military experience.
• Preferred: 5+ years in incident response, incident analysis, or computer forensics.
• Preferred: familiarity with standard security devices and how they are configured.
• Preferred: exposure to analyzing malicious code to understand how it infects systems and spreads.
• Preferred: experience using scripting languages for information security tasks.
• Preferred: a strong work ethic and a genuine interest in cyber security.
• Preferred: one or more of these certifications: GCFA, GCIA, GCIH, GNFA, GREM, OSCP, or CEH.
• Preferred: experience in a SaaS environment that operates globally.
• Preferred: experience in the legal sector with a solid understanding of e-discovery and litigation.
• Preferred: experience with cloud environments such as Azure, GCP, or AWS.

Conditions

The role is hybrid.

The expected base salary range is $104,000 to $156,000.

The final salary depends on factors such as depth of experience, skill set, qualifications, and internal pay equity. Offers at the top of the range are not typical, so that there is room for future salary growth in the role.

The company is committed to fair and equitable pay.

Benefits

• Eligible for total compensation that includes a competitive base salary, an annual performance bonus, and long-term incentives.