Security Engineer, Incident Response
About the role
Our client has an opportunity for a Security Engineer, Incident Response on an initial 3-month contract with expected extensions. The role will provide additional coverage while full-time team members are on leave and will focus on investigating and managing third-party security incidents affecting vendors, suppliers, and business partners. The ideal candidate has experience in incident response, security operations, digital forensics, or threat hunting and can assess third-party security events, determine business risk, coordinate remediation efforts, and communicate findings to stakeholders across the enterprise. Due to client requirements, applicants must be willing and able to work on a w2 basis.
Responsibilities
- Investigate and respond to third-party security incidents impacting vendors, suppliers, and partners.
- Perform incident triage, containment, eradication, root cause analysis, and remediation activities.
- Analyze security events through log review, forensic analysis, and other investigative techniques.
- Assess residual risk and recommend appropriate remediation actions.
- Track and document incidents within established security tools and processes.
- Prepare reports, briefings, and presentations for technical and non-technical stakeholders.
- Collaborate with internal Incident Response, Security Operations, and Technology teams.
- Follow established Incident Response procedures and security standards.
Requirements
- 5+ years of overall IT or technology experience.
- 3+ years of experience in information security.
- Experience in Incident Response, SOC Operations, Digital Forensics, Detection Engineering, or Threat Hunting.
- Understanding of information security principles, network and infrastructure security, web application security, operating systems, networking fundamentals, and incident investigation methodologies.
- Experience performing log analysis and security investigations.
- Strong written and verbal communication skills with technical documentation and report-writing abilities.
- Ability to manage multiple priorities in a fast-paced environment.
- Problem-solving and analytical skills.
- Preferred: Python or scripting experience, cloud security across AWS/Azure/GCP, EDR platforms such as CrowdStrike, SentinelOne, Tanium, Cortex XDR, SIEM and/or SOAR solutions, and certifications such as CISSP or GIAC (GCIH, GCFA, GCIA, GCED, GSEC).
Benefits
- Medical, Dental, and Vision benefits
- 401k with company matching
- Life insurance
Pay
Rate: $55.00 to $63.50/hr. w2
Schedule
Hybrid 4 Days a week on-site in Burbank, CA