Senior Information Security Engineer

🕒 il y a 6 jours

🍂 Massachusetts – Distant

🍂 Massachusetts – Remote

⏰ Temps Plein

🟠 Senior

👮‍♂️ Cybersécurité / Ingénieur Sécurité

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

The Hanover Insurance Group

Site WebLinkedInTous les Emplois

5001 - 10000 employés

Fondée en 1852

🛡️ Assurance

🤝 B2B

👥 B2C

🔥 Financement dans la dernière année

💰 €500 000 000 Post-IPO Debt - The Hanover Insurance Group en 2025-08

Insurance • B2B • B2C

The Hanover Insurance Group est une compagnie d'assurance basée aux États-Unis qui propose des produits et services d'assurance pour les particuliers et les entreprises. Hanover offre des lignes individuelles telles que l’habitation, l’automobile, la moto, le parapluie (umbrella), les copropriétés, les locataires et des couvertures spécialisées (voitures de collection, embarcations, objets de valeur), ainsi que des produits d’affaires complets incluant les polices pour propriétaires d'entreprises, l’auto commerciale, l’indemnisation des travailleurs, la responsabilité de direction, le cyber, la responsabilité professionnelle, les biens, la caution et les couvertures spécifiques à certains secteurs comme la construction, la santé, les sciences de la vie, le commerce de détail et plus encore. L’entreprise soutient ses clients et agents avec des services de réclamation, des outils de gestion de polices, des ressources éducatives, des solutions de gestion des risques et un réseau de distribution d'agents/brokers. Hanover met l’accent sur le service clientèle, les ressources de préparation, la responsabilité sociale et le soutien aux agents.

Description

• Manage, maintain, and optimize the on-premise SIEM platform, including log ingestion, parsing, correlation rules, dashboards, and alerting. • Ensure SIEM availability, performance, and scalability to support enterprise security monitoring needs. • Develop and tune detection rules, correlation logic, and use cases aligned with threat intelligence and organizational risk. • Oversee log source onboarding, configuration, and validation across servers, applications, network devices, and security tools. • Conduct regular SIEM health checks, capacity planning, and lifecycle management. • Administer and maintain on-premise IDS/IPS platforms, ensuring accurate detection and prevention of malicious activity. • Tune signatures, policies, and rulesets to reduce false positives while maintaining strong detection coverage. • Monitor IDS/IPS performance, availability, and event trends to identify anomalies or operational issues. • Coordinate with network and security teams to implement policy updates, rule changes, and architectural improvements. • Ensure both SIEM and IDS/IPS solutions are aligned with security governance frameworks, compliance requirements, and organizational policies. • Maintain documentation for system configurations, processes, runbooks, and governance controls. • Support audit activities by providing evidence, reports, and system configuration details. • Participate in incident response activities by providing SIEM/IDS/IPS insights, event analysis, and technical expertise. • Evaluate emerging threats and recommend enhancements to detection logic and monitoring capabilities. • Collaborate with architecture and leadership teams to align SIEM and IDS/IPS strategies with long-term security objectives. • Identify opportunities to automate processes, improve detection fidelity, and enhance operational efficiency.

🎯 Exigences

• Minimum 5 years of hands-on experience administering, managing, and maintaining: • An on-premise SIEM security solution, and • An on-premise IDS/IPS security solution • Demonstrated experience ensuring high availability, governance alignment, and operational effectiveness of security monitoring technologies. • Strong understanding of SIEM architecture, log ingestion pipelines, correlation logic, and event normalization. • Expertise with IDS/IPS technologies, signature tuning, network traffic analysis, and threat detection methodologies. • Proficiency with security log formats (syslog, JSON, CEF, LEEF, etc.). • Familiarity with network protocols, firewall rules, and enterprise network architecture. • Experience with Linux/Windows server administration as it relates to security tooling. • Ability to analyze security events, identify patterns, and support incident response. • Strong analytical and problem-solving abilities. • Excellent communication skills for cross-team collaboration. • Ability to work independently in a remote environment while managing multiple priorities. • Detail-oriented mindset with a commitment to governance, documentation, and operational discipline.

🏖️ Avantages

• Remote work arrangement