Senior IT Security Operations Engineer (Remote)

Lakeshore Learning Materials

1d•Remote

About The Position

Lakeshore is seeking a Senior IT Security Operations Engineer to join its IT Security team. This fully remote senior individual contributor will own the administration and optimization of security tools, contribute to preventative security measures, investigate threats, drive remediation, and work with IT and business stakeholders to strengthen the company’s security posture. The role also leads incident response when needed, with after-hours coverage shared across a team of five. The engineer will serve as the senior owner of security tools, mentor security analysts, advise leadership, and lead quarterly tabletop exercises and security awareness training. Responsibilities include managing tools such as S1, Tanium, Active Directory, Okta, and M365; improving alerting and automation; monitoring emerging threats and vulnerabilities; and communicating incident findings and lessons learned to leadership.

Requirements

Bachelor’s degree in computer science, cybersecurity, or a related field, or equivalent work experience.
7 or more years of experience in information security, including security operations, threat investigation, or incident response.
Hands-on experience with S1, Tanium, Active Directory, Okta, and M365.
Hands-on experience administering and optimizing third-party and cloud-provider security tools, such as endpoint protection, firewalls, IDS/IPS, vulnerability management, WAF, and IAM.
Experience with security platforms such as SIEM, EDR, and SOAR.
Experience securing AWS cloud environments.
Strong knowledge of security frameworks and best practices, including NIST, ISO, MITRE, NIST 800-53, PCI, CIS, and CSA CCM.
Comfort scripting in Python, PowerShell, or Bash.
Experience using threat intelligence services in a production environment.
Ability to build trust and influence people at all levels, including senior leadership.
Ability to explain security risk clearly and practically, verbally and in writing.
Ability to remain steady and make sound decisions when situations are unclear and high-stakes.
Interest in helping other analysts grow and sharing knowledge.

Nice To Haves

Certifications such as CISSP.
Ability to design security-relevant infrastructure as code (IaC).

Responsibilities

Administer and optimize security tools, including S1, Tanium, Active Directory, Okta, M365, endpoint protection, incident detection, and vulnerability management.
Fine-tune alerts and automation to help the team focus on important security issues.
Develop and implement preventative security measures, including detection, monitoring, and exploit prevention.
Investigate threats and drive remediation across IT and business teams, ensuring fixes are completed and lessons are carried forward.
Collaborate with IT and business stakeholders to identify gaps, recommend improvements, and strengthen the security posture.
Monitor emerging threats, vulnerabilities, and exploits, and apply findings to improve detection and prevention.
Lead incident response from initial alert through resolution and present findings and lessons learned to leadership.
Mentor and coach Information Security Analysts.
Lead quarterly tabletop exercises and security awareness training.