Security Engineer (4-7 Years)

Key Responsibilities:

• Triage and respond to security incidents and alerts.
• Monitor Common Vulnerabilities and Exposures (CVE) alerts and create CVE alerts for company products.
• Conduct threat hunting and log monitoring across multiple telemetry sources and vendors.
• Perform threat modeling and maintain security documentation.
• Triage and respond to SOC 2 security issues and alerts.
• Support compliance initiatives with NIST Cybersecurity Framework (CSF), CISA’s Secure By Design Initiative, SOC 2, and other relevant standards.
• Assist in designing and executing technical table-top exercises to enhance security preparedness.

Required Skills & Qualifications:

• Strong knowledge of cybersecurity principles, threat detection, and incident response.
• Experience with CVE monitoring, vulnerability management, and risk assessment.
• Hands-on experience with SIEM tools, log analysis, and security telemetry.
• Familiarity with compliance frameworks such as NIST CSF, SOC 2, and CISA’s Secure By Design.
• Proficiency in security documentation, reporting, and risk analysis.
• Strong analytical and problem-solving skills with the ability to respond to security threats effectively.

Preferred Qualifications:

• Security certifications such as CISSP, CISM, CEH, or equivalent.
• Experience with security automation and scripting.
• Knowledge of cloud security best practices.
• Previous experience working in a SOC or security operations environment.