Security Engineer

🕒 il y a 27 jours

🇺🇸 États-Unis – Télétravail

⏰ Temps Plein

🟡 Intermédiaire

🟠 Senior

👮‍♂️ Cybersécurité / Ingénieur Sécurité

👻 Score fantôme 10%

Ce que ça veut dire : la probabilité que cette offre reste ouverte sans recrutement actif.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

11:11 Systems

Site WebLinkedInTous les Emplois

1001 - 5000 employés

Fondée en 2020

🏢 Entreprise

🔒 Cybersecurity

🤝 B2B

💰 Private equity en 2021-10

Enterprise • Cybersecurity • B2B

11:11 Systems est un fournisseur de solutions de cloud géré et de résilience informatique qui opère sur une plateforme cloud résiliente primée. L'entreprise propose des services de cloud public et privé gérés, de stockage d'objets haute performance, de sauvegarde et de reprise après sinistre (DRaaS) en tant que service, des services de sécurité gérés (MDR, SIEM, EDR, zero trust) et des solutions de réseau (SD-WAN, SASE, connectivité multi-cloud), ainsi que des services de conseil et de continuité pour les entreprises clientes. 11:11 se positionne comme un partenaire Pinnacle VMware et met l'accent sur la modernisation, la protection et la gestion des charges de travail critiques pour les organisations des secteurs réglementés.

Description

• Support SOC Management in setting tactical and operational goals and developing policies and procedures for detection, assessment, reporting, and response to security events • Develop and fine-tune detection rules, correlation logic, and automation workflows across SIEM and SOAR platforms • Serve as customer-facing escalation support for issues and security incidents escalated from Tier 1 and Tier 2 SOC Analysts • Provide first-responder incident-response advisory support for clients experiencing security incidents within the scope of 11:11 Systems' software and systems • Own the timeliness and accuracy of critical incident identification, advisement, and reporting internally and to customers • Lead and support process-improvement initiatives to advance operational objectives, drive efficiencies, and improve KPIs • Drive implementation and continuous improvement of new technologies, capabilities, frameworks, and methodologies • Develop and maintain customer-facing security stacks, including SIEM, EDR, SOAR, WAF, and vulnerability scanning, and architect technical improvements • Troubleshoot network connectivity and infrastructure issues affecting the Security Operations Team • Advise on and help build SOC analyst training programs and provide cross-functional training • Monitor emerging threats, risks, and exploits and translate that knowledge into updated SIEM detection rulesets • Support service delivery with pre-production reviews for newly onboarded SIEM and EDR customers • Participate in an on-call rotation for after-hours support • Work in alignment with 11:11 Systems' Code of Business Ethics and Company Values, including responsible data handling and completion of required compliance training

🎯 Exigences

• 5+ years in information security, including 3+ years in information technology • 3+ years' experience with SIEM, EDR, SOAR, and/or vulnerability scanning tools, focusing on Azure Sentinel, Cortex XDR, and Tenable • Analyst-level experience in the telecom and/or enterprise cybersecurity industry • 1+ years' experience with Python scripting or development • 1+ years' experience with Linux administration and troubleshooting • Strong understanding of TCP/UDP/IP networking, packet analysis, and networking protocols • Experience with enterprise security architecture, detection, and response • Mature understanding of industry-standard incident response practices and SOC operations • Experience building Azure Sentinel use cases, analytics rules, and workbooks, including KQL query development • Experience with Kubernetes • Experience with Palo Alto products, including Cortex XDR, Panorama, and next-generation firewalls • Experience with ThreatX or similar WAF platforms • Active certifications such as Security+, CySA+, CASP+, CISSP, and/or GCIH • Working knowledge of security frameworks such as ISO, NIST, and CIS • Familiarity with Intelligence Driven Defense, Cyber Kill Chain, and/or MITRE ATT&CK • Up-to-date knowledge of attacker tactics, techniques, and procedures • Excellent communication, problem-solving, and interpersonal skills for customer- and team-facing work • Must be a US Citizen and legally eligible to work in the US without visa sponsorship • Ability to perform each essential function satisfactorily

🏖️ Avantages

• 24/7 monitoring, support, and escalation for customers • On-call rotation for after-hours support • Required compliance training • Reasonable accommodation for qualified individuals with disabilities