Information Security Engineer
HybridCincinnati, Ohio, United States or Herndon, Virginia, United States
Job Summary
Monitor, triage, and administer security tools including EDR, AV, email filtering, and vulnerability scanners. Manage SIEM dashboards, ingest sources, and Azure Defender alerts while conducting threat hunting exercises and research. Support incident response, forensics, and remediation activities for infrastructure and application vulnerabilities. Advise on procurement for the Security Tools Suite and maintain FIM agents and legacy antivirus health. Provide audit and compliance support, draft SOPs, and compile threat metrics for executive reporting. This role requires 7+ years of experience in information security with a focus on Azure and Microsoft 365 environments. U.S. citizenship is required.
Required Qualifications
- 7+ years of experience in information security
- Strong background in security operations, incident response, threat detection, and monitoring
- Demonstrated experience securing Azure and Microsoft 365 environments in regulated or enterprise contexts
- Experience with Multi-vendor environments including Windows Domains, Active Directory, and Linux-based environments
- Experience using on-premise and Azure cloud-native security tools (e.g. IDS, Firewalls, Splunk, Sentinel, Defender, EDR/NGAV, SIEM, vulnerability scanners, legacy and next-generation antivirus, email filtering, DLP, software whitelisting)
- Scripting and query language knowledge (Python, Splunk Query Language, KQL)
- Security Monitoring and Intrusion Detection (e.g. Log correlation and analysis, Incident Response, Forensics)
- Vulnerability Scanning and Remediation (Infrastructure, Application, and Database)
- Information Security Threat/Risk Assessment
- Demonstrated ability to understand and respond to complex business requirements
- Demonstrated ability in strong verbal and written communication skills to interface with technical and business stakeholders
- U.S. Citizens only
- Ability to gain and maintain Trusted Role
Desired Qualifications
- CISSP and other security/technical certifications
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.