Security Engineer

🕒 Setembro 19

🇺🇸 Estados Unidos – Remoto (EUA)

⏰ Tempo Integral

🟡 Pleno

🟠 Sênior

👮‍♂️ Cibersegurança / Engenheiro de Segurança

👻 Score fantasma 11%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

11:11 Systems

SiteLinkedInTodas as Vagas

1001 - 5000 funcionários

Fundada em 2020

🤝 B2B

🔒 Cibersegurança

🏢 Corporativo

💰 Private equity em 2021-10

B2B • Cybersecurity • Enterprise

A 11:11 Systems é um provedor de plataforma de nuvem resiliente e serviços de TI gerenciados, focada em ajudar organizações a modernizar, proteger e gerenciar sua infraestrutura. Eles oferecem nuvem pública e privada gerenciada, armazenamento de objetos de alto desempenho, backup (incluindo Veeam e Cohesity), recuperação de desastres como serviço (DRaaS) e um conjunto de serviços de segurança como varredura contínua de riscos, detecção e resposta gerenciada (MDR), SIEM gerenciado e EDR. Também fornecem soluções de rede (SD-WAN, SASE, conectividade gerenciada), consultoria e um Console de Nuvem para gestão centralizada, voltados para clientes empresariais e profissionais.

Descrição

• Support SOC Management in setting tactical and operational goals and developing policies and procedures for detection, assessment, reporting, and response to security events • Develop and fine-tune detection rules, correlation logic, and automation workflows across SIEM and SOAR platforms • Serve as customer-facing escalation support for issues and security incidents escalated from Tier 1 and Tier 2 SOC Analysts • Provide first-responder incident response advisory support for clients experiencing incidents within 11:11 Systems' software and systems • Own the timeliness and accuracy of critical incident identification, advisement, and reporting internally and to customers • Lead and support process improvement initiatives to advance operational objectives, drive efficiencies, and improve KPIs • Drive implementation and continuous improvement of technologies, capabilities, frameworks, and methodologies • Develop and maintain customer-facing security stacks, including SIEM, EDR, SOAR, WAF, and vulnerability scanning • Architect technical improvements to existing processes • Troubleshoot network connectivity and infrastructure issues affecting the Security Operations Team • Advise on and help build SOC analyst training programs and provide cross-functional training • Monitor emerging threats, risks, and exploits and translate that knowledge into updated SIEM detection rulesets • Support service delivery with pre-production reviews for newly onboarded SIEM and EDR customers • Participate in an after-hours on-call rotation • Follow 11:11 Systems' Code of Business Ethics and Company Values, including responsible data handling and compliance training

🎯 Requisitos

• 5+ years in information security, including 3+ years in information technology • 3+ years' experience with SIEM, EDR, SOAR, and/or vulnerability scanning tools, focusing on Azure Sentinel, Cortex XDR, and Tenable • Analyst-level experience in the telecom and/or enterprise cybersecurity industry • 1+ years' experience with Python scripting or development • 1+ years' experience with Linux administration and troubleshooting • Strong understanding of TCP/UDP/IP networking, packet analysis, and networking protocols • Experience with enterprise security architecture, detection, and response • Mature understanding of industry-standard incident response practices and SOC operations • Experience building Azure Sentinel use cases, analytics rules, and workbooks, including KQL query development • Experience with Kubernetes • Experience with Palo Alto products, including Cortex XDR, Panorama, and next-generation firewalls • Experience with ThreatX or similar WAF platforms • Active certifications such as Security+, CySA+, CASP+, CISSP, and/or GCIH • Working knowledge of security frameworks such as ISO, NIST, and CIS • Familiarity with Intelligence Driven Defense, Cyber Kill Chain, and/or MITRE ATT&CK • Up-to-date knowledge of attacker tactics, techniques, and procedures • Excellent communication, problem-solving, and interpersonal skills for customer- and team-facing work • Must be a US Citizen and legally eligible to work in the US without visa sponsorship • Ability to perform each essential function satisfactorily

🏖️ Benefícios

• 24/7 monitoring, support, and escalation for customers • On-call rotation participation for after-hours support • Required compliance training • Reasonable accommodation for qualified individuals with disabilities

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo