Information Security Engineer

Responsibilities

• Configure, maintain, and optimize security tooling across EDR, SOC/SIEM, and cloud security platforms
• Lead end-to-end incident response efforts, including triage, containment, eradication, recovery, and post-incident review
• Partner with SOC analysts and MDR providers to analyze and resolve security events/incidents
• Integrate security platforms and ensure effective data flow to enhance monitoring and response
• Ensure timely resolution of security findings through coordination across technology teams
• Leverage deep knowledge of the environment to identify root causes and implement effective remediation actions
• Continuously improve incident response processes, documentation, and overall security posture

Qualifications

• Required Qualifications: Bachelor’s degree in MIS, Computer Science, or a related field, or equivalent practical experience; 3+ years of experience in technology or security engineering, preferably within financial services; Experience working with cybersecurity frameworks such as MITRE ATT&CK or Cyber Kill Chain; Familiarity with security monitoring and detection concepts across enterprise environments; Hands-on experience with security tools such as EDR and SIEM technology; Experience supporting or working within cloud environments (e.g., AWS, Microsoft Azure)
• Preferred Qualifications: Exposure to cloud-native security services (e.g., AWS GuardDuty, CloudTrail); Experience analyzing alerts within endpoint or threat detection platforms; Proficiency in scripting or programming (e.g., Python); Ability to liaise effectively with SOC analysts and threat hunters from Managed Detection and Response vendors; Understanding of modern threat patterns, attack vectors, and mitigation approaches; Strong organizational skills with the ability to manage competing priorities; Experience contributing to knowledge sharing, documentation, or training efforts; Ability to work independently and handle operational responsibilities such as on-call support