Information Security Engineer
Overview
Strengthen enterprise security operations through automation, threat hunting, and advanced detection engineering. This Information Security Engineer will help improve the organization’s security posture by maintaining and optimizing SIEM and SOAR platforms, developing automated response workflows, tuning detection capabilities, and investigating sophisticated cyber threats. The role is ideal for a hands-on security professional who combines strong SOC experience with Python scripting, analytical problem-solving, and a passion for building efficient, scalable security processes.
Required Skills
- 6+ years of experience in security engineering supporting a Security Operations Center (SOC) environment or similar function
- Strong experience with SIEM platforms, including:
- Detection and correlation rule development
- Dashboard and report creation
- Alert analysis and tuning
- Demonstrable experience with SOAR platforms such as Palo Alto Cortex XSOAR, Splunk SOAR, or Tines
- Experience creating, managing, and optimizing SOAR playbooks
- Proficiency in Python for security automation, scripting, and custom integrations
- Strong understanding of incident response methodologies and threat intelligence
- Knowledge of cybersecurity frameworks, including MITRE ATT&CK and NIST
- Experience building automation workflows for threat detection, alert triage, and incident response
- Ability to integrate security tools and threat intelligence feeds using APIs and custom scripts
- Experience conducting proactive threat hunting and identifying indicators of compromise
- Strong analytical and problem-solving skills
- Ability to collaborate effectively with Information Security and cross-functional teams
- Strong technical documentation skills, including documenting detection rules, automation workflows, and incident response procedures
- Ability to work effectively in a fast-paced environment
Nice to Have Skills
- Relevant industry certification such as CISSP, GCIH, or a similar credential
- Experience with cloud security and cloud environments, including AWS, Azure, or GCP
- Familiarity with PowerShell, Bash, or other scripting languages
- Knowledge of network security and endpoint security solutions
Preferred Education and Experience
- Preferred education information was not provided.
- 6+ years of professional experience in Security Engineering, SOC operations, threat detection, incident response, or a related cybersecurity function is preferred.
- Experience maintaining security platforms and developing automated security workflows is strongly preferred.
Other Requirements
- Work arrangement: Hybrid
- Location: Foster City, CA
- Engagement: 6-month contract
- Work authorization arrangement: W2 only
- Ability to support security operations, threat hunting, automation development, and incident response activities in a collaborative environment
- Start date: ASAP
