Security Engineer

🔥 0 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

11:11 Systems

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2020

🏢 Enterprise

🔒 Cybersecurity

🤝 B2B

💰 Private equity on 2021-10

Enterprise • Cybersecurity • B2B

11:11 Systems is a managed cloud and IT resilience provider operating an award‑winning resilient cloud platform. The company offers managed public and private cloud, high‑performance object storage, backup and disaster‑recovery-as-a-service (DRaaS), managed security services (MDR, SIEM, EDR, zero trust), and networking solutions (SD‑WAN, SASE, multi‑cloud connectivity), plus consulting and continuity services for enterprise customers. 11:11 positions itself as a VMware Pinnacle Partner and emphasizes modernization, protection, and management of mission‑critical workloads for organizations across regulated industries.

📋 Description

• Support SOC Management in setting tactical and operational goals and developing policies and procedures for detection, assessment, reporting, and response to security events • Develop and fine-tune detection rules, correlation logic, and automation workflows across SIEM and SOAR platforms • Serve as customer-facing escalation support for issues and security incidents escalated from Tier 1 and Tier 2 SOC Analysts • Provide first-responder incident-response advisory support for clients experiencing security incidents within the scope of 11:11 Systems' software and systems • Own the timeliness and accuracy of critical incident identification, advisement, and reporting internally and to customers • Lead and support process-improvement initiatives to advance operational objectives, drive efficiencies, and improve KPIs • Drive implementation and continuous improvement of new technologies, capabilities, frameworks, and methodologies • Develop and maintain customer-facing security stacks, including SIEM, EDR, SOAR, WAF, and vulnerability scanning, and architect technical improvements • Troubleshoot network connectivity and infrastructure issues affecting the Security Operations Team • Advise on and help build SOC analyst training programs and provide cross-functional training • Monitor emerging threats, risks, and exploits and translate that knowledge into updated SIEM detection rulesets • Support service delivery with pre-production reviews for newly onboarded SIEM and EDR customers • Participate in an on-call rotation for after-hours support • Work in alignment with 11:11 Systems' Code of Business Ethics and Company Values, including responsible data handling and completion of required compliance training

🎯 Requirements

• 5+ years in information security, including 3+ years in information technology • 3+ years' experience with SIEM, EDR, SOAR, and/or vulnerability scanning tools, focusing on Azure Sentinel, Cortex XDR, and Tenable • Analyst-level experience in the telecom and/or enterprise cybersecurity industry • 1+ years' experience with Python scripting or development • 1+ years' experience with Linux administration and troubleshooting • Strong understanding of TCP/UDP/IP networking, packet analysis, and networking protocols • Experience with enterprise security architecture, detection, and response • Mature understanding of industry-standard incident response practices and SOC operations • Experience building Azure Sentinel use cases, analytics rules, and workbooks, including KQL query development • Experience with Kubernetes • Experience with Palo Alto products, including Cortex XDR, Panorama, and next-generation firewalls • Experience with ThreatX or similar WAF platforms • Active certifications such as Security+, CySA+, CASP+, CISSP, and/or GCIH • Working knowledge of security frameworks such as ISO, NIST, and CIS • Familiarity with Intelligence Driven Defense, Cyber Kill Chain, and/or MITRE ATT&CK • Up-to-date knowledge of attacker tactics, techniques, and procedures • Excellent communication, problem-solving, and interpersonal skills for customer- and team-facing work • Must be a US Citizen and legally eligible to work in the US without visa sponsorship • Ability to perform each essential function satisfactorily

🏖️ Benefits

• 24/7 monitoring, support, and escalation for customers • On-call rotation for after-hours support • Required compliance training • Reasonable accommodation for qualified individuals with disabilities