This job is closed
Applications are no longer available for this announcement. Explore current related opportunities below.
Job description
We are seeking an experienced Security Engineer – Incident Response to join a Global Information Security team and help investigate, analyze, and respond to cybersecurity incidents impacting third-party vendors, suppliers, and business partners.
This role is ideal for a security professional with hands-on experience in Incident Response, SOC operations, Digital Forensics, Threat Hunting, or Security Operations who is comfortable investigating complex security events and communicating risk to both technical and non-technical stakeholders.
What You'll Do
Investigate and respond to third-party cybersecurity incidents
Perform incident triage, containment, eradication, remediation, and root cause analysis
Conduct in-depth technical investigations, including log analysis and digital forensic analysis
Evaluate the potential business and security impact of incidents
Determine residual risk and appropriate remediation steps
Document and track incident response activities
Prepare incident reports, briefings, and presentations for leadership and security partners
Work closely with Incident Response, Information Security, engineering, technology, and business teams
Follow established Incident Response processes and procedures
Required Experience
5+ years of overall technology experience
3+ years of information security experience
Hands-on experience within Incident Response, SOC, Digital Forensics, Threat Hunting, or Detection
Strong understanding of information security principles, practices, and procedures
Understanding of:
Web application security
Infrastructure and Internet security
Operating systems
Networking protocols
Databases
Ability to quickly assess security incidents and identify, isolate, and communicate risks
Strong technical writing and documentation skills
Excellent written and verbal communication skills
Ability to manage multiple incidents and priorities in a fast-paced environment
Preferred Qualifications
Experience with EDR tools such as CrowdStrike, SentinelOne, Cortex XDR, or Tanium
Experience with SIEM and/or SOAR platforms
Experience responding to incidents within AWS, Azure, or GCP
Python or other scripting experience
CISSP certification
SANS/GIAC certifications such as GCIH, GCFA, GCIA, GCED, or GSEC
#CyberSecurity #IncidentResponse #SecurityEngineer #SOC #DigitalForensics #ThreatHunting #InformationSecurity #CloudSecurity #SIEM #CyberSecurityJobs
#J-18808-Ljbffr
Worksite address
los angeles, CA, 90079, US
Who can apply
Review the original listing for work authorization, qualifications and employer requirements.