Security Engineer

🔥 2 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 14%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

11:11 SYSTEMS

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2020

💼 Consulting

🏥 Healthcare

📦 Logistics

Consulting • Healthcare • Logistics

11:11 Systems is a leading provider of cloud solutions, offering services that include managed public and private cloud, data protection, disaster recovery, and security. The company focuses on modernizing IT infrastructures for businesses, enhancing resilience against threats, and simplifying management through advanced technology. With over 40 years of experience, 11:11 Systems leverages its deep expertise to tailor solutions for diverse industries such as education, government, and healthcare, ensuring high levels of security and compliance for its clients.

📋 Description

• Support SOC Management in setting tactical and operational goals and developing policies and procedures for security event detection, assessment, reporting, and response • Develop and fine-tune detection rules, correlation logic, and automation workflows across SIEM and SOAR platforms • Serve as customer-facing escalation support for issues and security incidents escalated from Tier 1 and Tier 2 SOC Analysts • Provide first-responder incident response advisory support for clients within the scope of 11:11 Systems' software and systems • Own the timeliness and accuracy of critical incident identification, advisement, and reporting internally and to customers • Lead and support process improvement initiatives to advance operational objectives, drive efficiencies, and improve KPIs • Drive implementation and continuous improvement of technologies, capabilities, frameworks, and methodologies • Develop and maintain customer-facing security stacks including SIEM, EDR, SOAR, WAF, and vulnerability scanning, and architect technical improvements • Troubleshoot network connectivity and infrastructure issues affecting the Security Operations Team • Advise on and help build SOC analyst training programs and provide cross-functional training • Monitor emerging threats, risks, and exploits and translate knowledge into updated SIEM detection rulesets • Support service delivery with pre-production reviews for newly onboarded SIEM and EDR customers • Participate in an on-call rotation for after-hours support • Work in alignment with 11:11 Systems' Code of Business Ethics and Company Values, including responsible data handling and required compliance training

🎯 Requirements

• 5+ years in information security, including 3+ years in information technology • 3+ years' experience with SIEM, EDR, SOAR, and/or vulnerability scanning tools, with focus on Azure Sentinel, Cortex XDR, and Tenable • Analyst-level experience in the telecom and/or enterprise cybersecurity industry • 1+ years' experience with Python scripting or development • 1+ years' experience with Linux administration and troubleshooting • Strong understanding of TCP/UDP/IP networking, packet analysis, and networking protocols • Experience with enterprise security architecture, detection, and response • Mature understanding of industry-standard incident response practices and SOC operations • Experience building Azure Sentinel use cases, analytics rules, and workbooks, including KQL query development • Experience with Kubernetes • Experience with Palo Alto products, including Cortex XDR, Panorama, and next-generation firewalls • Experience with ThreatX or similar WAF platforms • Active certifications such as Security+, CySA+, CASP+, CISSP, and/or GCIH • Working knowledge of security frameworks such as ISO, NIST, and CIS • Familiarity with Intelligence Driven Defense, Cyber Kill Chain, and/or MITRE ATT&CK • Up-to-date knowledge of attacker tactics, techniques, and procedures • Excellent communication, problem-solving, and interpersonal skills for customer- and team-facing work • Must be a US Citizen and legally eligible to work in the US without visa sponsorship • Ability to perform each essential function satisfactorily; reasonable accommodation may be made for qualified individuals with disabilities