Senior Security Engineer

Paymentus; Richmond Hill; On-site; CAD 80,000 - 110,000; Full time

Job summary

A leading company in the payment processing sector is seeking a Security Engineer to enhance their security posture. The successful candidate will analyze security incidents, manage Elastic SIEM infrastructure, and automate processes to improve efficiency. This role requires strong technical skills in log analysis, incident response, and scripting. Join a dynamic team committed to maintaining high security standards and compliance.

Qualifications

• 5+ years of experience in a SOC environment with a focus on ELASTIC SIEM.
• Strong knowledge of log analysis, incident response, and threat detection methodologies.

Responsibilities

• Investigate security incidents through log data analysis.
• Create and refine SIEM rules, alerts, and dashboards.
• Automate repetitive tasks using PowerShell and Python.

Skills

Log Analysis

Incident Response

Threat Detection

Problem Solving

Attention to Detail

Tools

Elastic SIEM

PowerShell

Python

AWS

GCP

Azure

Job description

Job Description for Security Engineer

The Security Engineer will be responsible for investigating security incidents through log data analysis to identify threats and vulnerabilities. They will respond promptly to incidents, document and analyze them thoroughly, and develop and maintain incident runbooks and response procedures. The role involves creating and refining SIEM rules, alerts, and dashboards to enhance threat detection capabilities, while continuously optimizing detection logic to reduce false positives and improve accuracy. Collaboration with SOC analysts to identify and implement new use cases is essential.

**Elastic SIEM Management:**

• Design and maintain a scalable Elastic SIEM infrastructure.
• Manage data ingestion, ensuring accurate and consistent logging from various sources.
• Monitor system health and performance, implementing necessary optimizations.

**Scripting & Automation:**

• Automate repetitive tasks using PowerShell and Python to improve SOC efficiency.
• Develop custom scripts to enhance log parsing and event enrichment processes.

**Security & Best Practices:**

• Implement SIEM security measures, including user roles and access controls.
• Stay updated with the latest security trends and ensure compliance with industry standards.

**Required Skills & Experience:**

• 5+ years of experience in a SOC environment with a focus on ELASTIC SIEM.
• Strong knowledge of log analysis, incident response, and threat detection methodologies.
• Experience with the Elastic SIEM stack (Elasticsearch, Logstash, Kibana).
• Proficiency in PowerShell and Python scripting.
• Familiarity with network protocols, cybersecurity frameworks, and attack vectors.
• Experience with Linux and cloud platforms (AWS, GCP, or Azure).
• Excellent problem-solving skills and attention to detail.

**EEO Statement:** Paymentus is an equal opportunity employer committed to diversity and inclusion in the workplace.

**Reasonable Accommodation:** We support applicants and employees with disabilities, providing accommodations as needed to enable them to perform their essential job functions.

Additional Details:

• Seniority level: Mid-Senior level
• Employment type: Full-time