Information Security Engineer

Primary Responsibilities

• Triage Security Alerts: Monitor and analyze security alerts from various sources (SIEM, EDR, email, etc.) to determine severity and required response
• User Support & Education: Serve as the first point of contact for security-related user issues, providing guidance, troubleshooting, and education
• Incident Escalation: Escalate confirmed or high-risk incidents to senior security engineers or incident response teams with clear documentation
• Threat Analysis: Perform initial investigation and enrichment of suspicious activity to support threat detection and response
• Tool Utilization: Leverage security tools (e.g., Splunk, CrowdStrike, Microsoft Defender, etc.) to investigate and resolve issues
• Documentation: Maintain accurate records of incidents, resolutions, and user interactions in ticketing systems
• Collaboration: Work closely with IT, compliance, and other security team members to ensure consistent and effective security practices
• Process Improvement: Identify trends, recurring issues, and process gaps from ticket queue activity; partner with subject matter experts to improve detections, streamline workflows, and evaluate automation opportunities
• Leverage enterprise-approved AI tools to streamline workflows, automate tasks, and drive continuous improvement

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, or Engineering related field
• 2+ years of experience in information security, IT support, or SOC environments
• 2+ years of experience with common security tools and platforms (e.g., SIEM, EDR, phishing analysis tools)
• 2+ years of experience with security fundamentals (networking, endpoint protection, identity management)

Preferred Qualifications

• Experience with scripting or automation (e.g., Python, PowerShell)
• Security certifications such as CompTIA Security+, SSCP, or equivalent
• Experience with Microsoft 365 security tools and cloud environments (Azure, AWS)
• Familiarity with ITIL or similar service management frameworks
• Experience with DLP Platforms (e.g. Broadcom, Zscaler, Proofpoint)
• Understanding of data classification models and encryption standards
• Excellent communication and interpersonal skills, with a customer-first mindset
• Able to work in a fast-paced environment and manage multiple priorities