Security Engineer II - CSIR

Stifel•Saint Louis, MO

8h•Onsite

About The Position

The Security Engineer II - Cybersecurity Incident Response (CSIR) is a front-line member of the Cybersecurity Incident Response team that has responsibility for protecting corporate technology assets. The Engineer II will assist in the development of security solutions and the maintenance, documentation and system lifecycle of those solutions. This position will utilize multiple complex tools to assist in their daily duties to analyze, detect, and troubleshoot security situations and solutions. This is a Compressed Schedule position working a 4 days/10 hours shift.

Requirements

Solid understanding how to identify and prioritize security incidents and escalate to management or other team members.
Solid understanding of end-user technology and proven troubleshooting skills.
Ability to systematically assess a problem or situation to accurately identify probable causes and solutions.
Solid understanding of a broad range of IT disciplines that would impact overall security posture.
Proficiency in relating complex technical situations to non-technical customers.
Ability to multi-task and effectively prioritize work streams.
Bachelor's degree in computer science, information systems, cybersecurity, or related field, or equivalent experience.
2+ years' experience in an information technology or information security role.
Proficient in Microsoft 365 (Excel and Outlook).
Hands-on experience in security systems, including firewalls, intrusion detection systems, endpoint detect response, anti-virus and anti-malware software, authentication systems, SIEM/UEBA tools, content filtering, etc.
Solid understanding of IP-based networking and networking components, including monitoring tools.

Nice To Haves

Experience with ticketing systems; monitoring, logging, and endpoint security tools; SIEM/UEBA platforms; reporting and technical documentation tools; and incident response methodologies.

Responsibilities

Engineer, implement, administer, and monitor security measures for the protection of computer systems, networks and information.
Prepare and document standard operating procedures and protocols.
Configure and troubleshoot security tools and/or devices.
Develop technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks.
Involvement in security investigations and incident response duties as assigned.
Ability to write, follow, and improve incident response playbooks.
Write comprehensive reports including assessment-based findings, outcomes, and propositions for further system security enhancement.
Work across team boundaries to share information and to collaborate when solving complex problems.
Coordinate planned change windows, peer review, and basic change control including analyzing results and process improvement opportunities.
Help monitor for security events and determine and execute appropriate response strategies.