Information Security Engineer

Gulf Coast Automation Group•Chicago, IL

31d•Remote

About The Position

TalentFish is seeking an Information Security Engineer – Security Automation and Response for a fully remote, Direct Hire role. This position is crucial for advancing Security Operations capabilities by developing SOAR playbooks, implementing automation, and creating AI-driven workflows. The goal is to streamline incident response processes and enhance the operational efficiency of the Security Operations Center (SOC).

Requirements

BS or BA in Computer Science, Engineering, or equivalent education, training, or work experience.
5+ years of security experience, or equivalent training and education.
Solid knowledge of computing systems, data network communications, and network architecture.
Hands-on experience with SOAR playbook development.
Required scripting or programming skills (Python, PowerShell, Go, etc.).
Experience in incident response and threat investigation.
Experience in threat detection and understanding of logging systems.
Effective written and verbal communication skills.
Authorization to work in the U.S. without current or future visa sponsorship.

Nice To Haves

Security certifications (GIAC, CISSP) preferred.

Responsibilities

Develop, implement, and maintain SOAR playbooks to automate repetitive security tasks, including alert triage, threat investigation, and incident response, using tools like SOAR, Python, and API integrations.
Advance Security Operations capabilities through AI-driven initiatives, in collaboration with the Information Security Operations Manager.
Investigate malware, intrusions, unauthorized access, and data infiltration/exfiltration events.
Analyze logs, memory, disk images, and network captures to determine attack scope and impact.
Stay current on cyber threats and industry best practices to continuously enhance SOC capabilities.
Work with SIEM platforms and associated query languages (Yara-L, CQL, SPL, etc.).
Participate in Purple Team activities.
Participate in on-call rotation and respond to critical security events.