Sr. Cyber Security Engineer (remote)
About The Position
Crum & Forster’s Cyber & Information Security team is seeking a Senior Cybersecurity Engineer/Analyst for its Threat Detection and Response team. Reporting to the Threat Detection & Response Director, this role partners with the Managed Services SOC to maintain effective capabilities for identifying malicious activity, investigating escalated alerts through closure, and supporting incident response. The position works with security analysts and next-generation security tools to detect and remediate cyber threats. The role includes triaging and investigating security alerts and threats, coordinating with internal stakeholders and system and application owners, and supporting employees who report cybersecurity concerns. It also develops and maintains security automation, operating procedures, and cybersecurity playbooks, and identifies improvements to detection capabilities.
Requirements
- 7 or more years of cybersecurity-related experience in a SOC.
- Previous experience working in Security Operations Center and engineering roles.
- Understanding of and familiarity with threat intelligence news and vulnerabilities.
- Experience investigating phishing and email-related attacks.
- Experience with Windows and Linux.
- Fundamental understanding of system and network security principles and technology.
- Fundamental understanding of networking, including TCP/IP and other protocols.
- Ability to interface with a wide audience of technical and non-technical personnel.
- Understanding of the Cyber Kill Chain and MITRE ATT&CK Framework.
- Ability to prioritize and manage workloads and deadlines at both tactical and project-oriented levels.
- Excellent written and verbal communication skills.
- Self-starter motivated and driven to learn.
- Bachelor’s degree in a technical discipline or equivalent experience.
- Experience, knowledge, and improvements involving SIEM, SOAR, email security, and cloud security platforms.
- Experience with scripting automation in Python or other languages.
- Experience with SIEM, IDS/IPS, firewalls, endpoint detection and response, and email security.
- Experience protecting, investigating, and responding to cloud security issues.
Nice To Haves
- Prior experience and/or certifications in AWS, Azure, and/or GCP.
- Experience performing risk assessments, penetration testing, and tabletop exercises.
- Security-focused certifications.
- Technical writing experience.
Responsibilities
- Triage escalated cyber alerts and coordinate with internal stakeholders through ticketing.
- Investigate email-, host-, and network-based cybersecurity threats.
- Serve as a point of contact for employees reporting cybersecurity concerns.
- Identify and recommend opportunities to refine detection capabilities and reduce false positives.
- Coordinate with system and application owners to verify and remediate cyber threats.
- Develop and implement Security Orchestration and Automation.
- Develop, update, and publish Standard Operating Procedures.
- Adhere to, update, and maintain cybersecurity playbooks.
Benefits
- Competitive compensation package.
- Generous 401(k) employer match.
- Employee Stock Purchase Plan with employer matching.
- Generous paid time off.
- Health, dental, and vision benefits, plus programs supporting physical, mental, and financial well-being for employees and their families.
- Career development opportunities, which may include tuition reimbursement, industry-related certifications, and professional training.
- Matching donation program, volunteer opportunities, and an employee-driven corporate giving program.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
