Information Security Engineer 3

eBay•Austin, TX

6d•Hybrid

About The Position

eBay, Inc. seeks Information Security Engineer 3 in Austin, TX. This role involves investigating computer and information security incidents to determine the extent of compromise to information and automated information systems. The engineer will respond to escalated notable events from security tooling to develop/execute security controls and countermeasures to prevent internal or external attacks or attempts to infiltrate company email, data, e-commerce, and web-based systems. Responsibilities include providing information and updates to shift leads, building pass-downs for the next shift, working closely with supporting teams, providing feedback for new security policy and standards, and engaging with other teams. The role also requires researching attempted or successful efforts to compromise systems security and designing countermeasures. As it relates to information systems, the engineer will perform HR investigations and legal holds in a forensically sound manner. Staying educated on the latest trends, techniques, tactics, and procedures is also a key aspect of this position. Partial telecommuting is permitted from within a commutable distance.

Requirements

Bachelor’s degree, or foreign equivalent, in Computer and Information Technology, Cybersecurity or a closely related field.
Log analysis using SIEM tools including Splunk
Put remediation and recovery measures in place
Investigate unidentified processes using EDR and SIEM to find malicious ones that break security controls
Handle triage analysis through EDRs such as Carbon Black or Crowdstrike to identify the incident's timeline and the hosts it affected
Used OSINT tools like Virus Total, Any Run, and MX Toolbox to analyze files, domains, and emails to evaluate their validity
Experience organizing and suggesting security control measures for technical team
Experience applying security testing to detect potential vulnerabilities
Must be legally authorized to work in the U.S. without sponsorship.

Responsibilities

Investigate computer and information security incidents to determine extent of compromise to information and automated information systems.
Respond to escalated notable events from security tooling to develop/execute security controls, Defense/countermeasures to prevent internal or external attacks or attempts to infiltrate company email, data, e-commerce and web-based systems.
Provide information and updates to shift leads, build pass-downs for the next shift, work closely with supporting teams, provide feedback for new security policy and standards, and engage with other teams.
Research attempted or successful efforts to compromise systems security and design countermeasures.
As it relates to information systems, perform HR investigations and legal holds in a forensically sound manner.
Stay educated on the latest trends, techniques, tactics and procedures.