IT Security Engineer

Encore Global•Coppell, TX

4d•$77,554 - $100,820•Onsite

About The Position

The Security Team is responsible for securing Encore’s infrastructure to ensure the confidentiality, integrity, and availability of systems and resources. The IT Security Engineer works to prevent, detect, and respond to security events while also supporting the operation, maintenance, and continuous improvement of Encore’s security platforms and controls. This role works closely with systems engineers, network engineers, application teams, and senior security engineers to maintain Encore’s global security posture. The IT Security Engineer monitors emerging threats, investigates security events, supports security tool deployments and enhancements, and coordinates with internal teams to reduce risk and improve resilience. This position reports to the Manager of Information Security.

Requirements

3 years of general IT experience (help desk or desktop support).
3 years of incident response experience.
3 years of experience with: DNS security, Endpoint Detection and Response, Phishing Analysis, Email Security, Data Loss Prevention, Security Awareness Training, Identity Protection, Cloud Security.
Proficient in security operations, understanding of Blue Team and incident response tactics.
Familiarity with security technologies and tools: including IDS/IPS, firewalls, proxies, SIEM, EDR.
Outstanding communication and analytical skills.
Understanding of regulatory compliance and risk management frameworks.
Logical thinking ability to translate security requirements into precise plans to mitigate risk.
Relevant security certifications.

Responsibilities

Monitor security alerts, network traffic, and user risk/activity to identify and respond to potential security incidents.
Monitor data flows and user activities to detect and help prevent potential data loss.
Perform triage and initial investigation of security events and suspicious activity.
Identify false positives, tune detections under guidance, and recommend improvements.
Execute incident response activities according to documented playbooks and procedures.
Document incidents, findings, root causes, and remediation actions.
Investigate security events, categorize incidents, and escalate critical or complex issues as appropriate.
Assist with root cause analysis and participate in post-incident reviews.
Support containment, eradication, and recovery efforts during incidents.
Support the operation, monitoring, and health of security platforms including SIEM, EDR/MDR, email security, DNS security, identity protection, and DLP.
Assist with SIEM onboarding, log parsing, tuning, and alert optimization.
Assist with configuration, testing, and deployment of new security tools and capabilities.
Participate in security platform upgrades, changes, and maintenance activities.
Follow change management processes for security system updates and enhancements.
Assist in troubleshooting security product issues and integration failures.
Generate clear and concise incident reports, findings, and analysis summaries.
Communicate security risks, incidents, and recommended actions to stakeholders as appropriate.
Collaborate with cross-functional teams to align security operations with organizational objectives.
Create, maintain and improve documentation, runbooks, playbooks, and operational procedures.
Perform other duties as assigned.