Security Operations Engineer

Reserv • Atlanta, GA

133d • Remote

About The Position

As our Cybersecurity Analyst you won't just be watching a dashboard; you’ll be helping to build the shield that protects our digital assets and our customers. You’ll be responsible for executing tactical daily tasks and participating in broader planning efforts. If you thrive on novel problem-solving and adapt quickly to new technologies, you’ll fit right in! This is a hands-on technical role focused on protecting the organization’s digital assets from cyber threats by monitoring networks, identifying vulnerabilities, implementing security measures, threat hunting, responding to breaches and developing security policies & procedures. No day will be the same and you will continuously learn & grow! Successful candidates will bring experience utilizing and configuring various security tools such as IDP, EDR/XDR, SIEM, SOAR, IDS/IPS and secure email gateways.

Requirements

• Minimum of 3 years of experience in the trenches of a dedicated cybersecurity role
• Working understanding of NIST Cybersecurity Framework
• Technical proficiency with MacOS, Windows, Unix/Linux
• Experience securing and monitoring mobile devices
• Knowledge of current threat actors, TTPs, and MITRE ATT&CK framework
• Fluent in SIEM, EDR/XDR, and Vulnerability Scanners
• Experience with cloud-based productivity platforms such as Google Workspace and/or Microsoft 365
• Demonstrated experience working with SIEM tools, vulnerability scanners, endpoint protection, email security and threat intelligence platforms
• Experience with penetration testing
• Experience performing risk assessments, drafting/maintaining cybersecurity policies and procedures, and constructing after-action reports with precise details
• Familiarity with SSO and identity and access management systems
• Security+, CySA+ or similar industry-standard security certifications
• Strong written and verbal communication skills
• You possess a relentless technological curiosity where "sniffing out" anomalies is becoming second nature
• Experience working in a cloud-first or startup environment

Nice To Haves

• Bachelors degree in Cybersecurity, IT, or related field
• Automation experience with various scripting languages (e.g. Bash, Python, PowerShell)
• AWS and/or GCP certifications or demonstrated experience
• Deep understanding of at least two major operating systems
• Familiarity with the concepts of secure software development (SSDLC)

Responsibilities

• Continuously monitor security telemetry to identify potential threats, malicious activity, or unauthorized access.
• Investigate, analyze, classify, prioritize and contain security breaches in real-time, providing detailed reporting and post-incident analysis.
• Conduct vulnerability assessments to identify system weaknesses before they are exploited.
• Coordinate and assist with penetration testing activities.
• Install, configure and maintain security software and systems such as endpoint security, intrusion detection, prevention systems and logging platforms.
• Install and fine-tune our arsenal—from EDR/XDR and SIEM to SOAR and IDS/IPS.
• Research, analyze and stay up to date on the latest security trends, hacking techniques, emerging cyber threats.
• Educate employees and stakeholders on security protocols, phishing threats and data protection.
• Develop SOPs, playbooks/runbooks to consistently respond to common incidents that allow our security posture to scale as fast as our business.
• Hunt for unknown threats in the environment by analyzing logs based on current and emerging threat intelligence.

Benefits

• Generous health-insurance package with nationwide coverage, vision, & dental
• 401(k) retirement plan with employer matching
• Competitive PTO policy
• Generous family leave policy
• Work from almost anywhere to facilitate your work life balance
• Cool, functional swag
• Apple laptop, large second monitor, and other quality-of-life equipment you may want

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level