Information Security Engineer

Foster City, CA

1d

About The Position

The Security Engineer will improve the company’s security posture through automation and threat hunting. The role focuses on SIEM and SOAR platform management, Python scripting, automated security workflows, detection tuning, and response to sophisticated cyber threats. The engineer will develop and implement automation, improve threat detection and incident response, and collaborate with the Information Security team and other teams.

Requirements

• At least 6 years of experience in a Security Engineering role supporting a Security Operations Center (SOC) or similar function.
• Demonstrable experience with SOAR platforms and playbook development.
• Proficiency in Python for scripting and security task automation.
• Strong understanding of incident response methodologies, threat intelligence, and cybersecurity frameworks such as MITRE ATT&CK and NIST.
• Excellent analytical and problem-solving skills.
• Ability to work effectively in a fast-paced environment.

Nice To Haves

• Relevant industry certifications such as CISSP, GCIH, or similar.
• Experience with cloud security and environments such as AWS, Azure, or GCP.
• Familiarity with PowerShell, Bash, or other scripting languages.
• Knowledge of network and endpoint security solutions.

Responsibilities

• Maintain SIEM and SOAR platforms to ensure their performance and effectiveness in detecting and responding to security threats.
• Develop and fine-tune SIEM detection and correlation rules, dashboards, and reports to identify anomalous activities.
• Create, manage, and optimize SOAR playbooks to automate incident response and streamline security operations.
• Use Python to develop custom integrations and automate repetitive SOC tasks.
• Build and maintain automation workflows for threat detection, alert triage, and incident response.
• Integrate security tools and threat intelligence feeds with SIEM and SOAR platforms using APIs and custom scripts.
• Conduct proactive threat hunting to identify potential security gaps and indicators of compromise.
• Analyze security alerts and data from multiple sources to identify and respond to potential incidents.
• Collaborate with Information Security team members and other teams to improve organizational security.
• Create and maintain documentation for detection rules, automation workflows, and incident response procedures.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed