Information Security Engineer

Percepta; Austin (TX); Remote; USD 65,000 - 70,000; Full time

Benefits offered by this job

Annual incentive program

Medical, dental, and vision

Tax-advantaged health care accounts

PTO and wellness time off

Tuition reimbursement and online/field

Job summary

TTEC is seeking an Information Security Engineer for a remote role in the United States. You will investigate security alerts across SIEM, EDR, email security, and cloud platforms as part of the SOC and Threat Management teams, reporting to the Information Security Manager.

Daily duties include correlating alerts, analyzing incident data, and documenting findings and actions. Requires 2–3 years in IT security; strong communication and scripting skills are a plus.

Qualifications

• Hands-on SOC experience investigating and responding to security events across SIEM, EDR, email security, NGFW, cloud platforms.
• Ability to develop, test, and refine detection queries and investigation playbooks with Threat Management.
• Knowledge of TCP/IP, DNS, HTTP/S, Windows and Linux security logs, and authentication concepts.
• 2-3 years of IT security-related experience; IT degree or training helpful.

Responsibilities

• Correlate security alerts and hunt threats across multiple technologies as part of SOC and Threat Management.
• Maintain situational awareness of threat landscape and coordinate with IT Operations and Engineering.
• Document incidents with severity, scope, evidence, steps, and actions; follow playbooks and escalation procedures.

Skills

SOC experience

SIEM

EDR

Email security

NGFW

Cloud platforms

Threat intelligence

Communication skills

Education

2–3 years IT security experience

Job description

Job Description - Information Security Engineer (04FV5)

Information Security Engineer

Information Security Engineer

Be the spark that brightens days and ignite your career with TTEC’s award-winning employment experience. As a Information Security Engineer working remote in US, you’ll be a part of bringing humanity to business. #experienceTTEC
Our employees have spoken. Our purpose, team, and company culture are amazing and our Great Place to Work® certification in the United States says it all!

What You’ll Do

Investigate security alerts and threat hunting leads across a variety of technologies (SIEM, EDR, email security, cloud, etc) as part of the SOC and with the Threat Management team.

Maintain situational awareness of changes to threat landscape, industry trends, and internal operating environment.You’ll interact frequently with other members of the Information Security teams, internal IT Operations and Engineering teams, and vendor technical resources.

You’ll report to the Information Security Manager. Your role is impactful as it protects TTEC from data loss and security events.

During a Typical Day, You’ll

• Correlate SIEM alerts with endpoint process activity, authentication events, email artifacts, network connections, and cloud audit logs to establish incident timelines, identify affected users and assets, and distinguish benign activity from suspected compromise.
• Spend time understanding the environment you're responsible for and engage with various teams to gain further knowledge of the environment(s)
• Recognize potential, successful, and unsuccessful intrusion attempts and compromises through review and analysis of relevant event data
• Document incident severity, scope, supporting evidence, investigation steps, and recommended actions in case records. Follow approved response playbooks and escalation procedures, coordinate authorized containment and remediation with system owners, and validate recovery before closing incidents.
• Document incident severity, scope, supporting evidence, investigation steps, and recommended actions in case records. Follow approved response playbooks and escalation procedures, coordinate authorized containment and remediation with system owners, and validate recovery before closing incidents.

What You Bring to the Role

• Hands-on SOC experience investigating and responding to security events across two or more of the following: SIEM, EDR, email security, NGFW, cloud platforms, threat intelligence
• Partner with the Threat Management team to develop, test, and refine detection queries and investigation playbooks.
• Validate detections against relevant event data, investigate false positives, and document telemetry gaps and recommended improvements.
• Ability to investigate cloud security events by reviewing identity and access permissions, administrative activity, audit logs, and network access controls; identify suspicious authentication, privilege changes, and potentially unauthorized access to cloud resources.
• Working knowledge of TCP/IP, DNS, HTTP/S, common network services, Windows and Linux security logs, and authentication and authorization concepts, with the ability to use this knowledge to interpret suspicious host, user, and network activity.
• Strong communication and interpersonal skills
• Preferred: Ability to use a scripting language to parse logs, enrich indicators, and automate repetitive investigation tasks, with appropriate validation, error handling, documentation, and protection of sensitive data.
• Candidate will possess 2-3 years of experience in Information Systems or IT security-related functions. IT degree and/ or training is very helpful.

What You Can Expect

• An annual incentive program
• Medical, dental, and vision
• Tax-advantaged health care accounts
• Financial and income protection benefits
• Paid time off (PTO) and wellness time off
• Tuition reimbursement and access to thousands of free online courses

The anticipated range is$65,000-$70,000 annual salary. Actual compensation offers to a candidate may vary based upon geographic location, work experience, education and/or skill levels.

About TTEC

Our business is about making customers happy. That's all we do. Since 1982, we've helped companies build engaged, pleased, profitable customer experiences powered by our combination of humanity and technology. On behalf of many of the world's leading iconic and hypergrowth brands, we talk, message, text, and video chat with millions of customers every day. These exceptional customer experiences start with you.

TTEC is proud to be an equal opportunity employer where all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. TTEC embraces and is committed to building a diverse and inclusive workforce that respects and empowers the cultures and perspectives within our global teams. We aim to reflect the communities we serve, by not only delivering amazing service and technology, but also humanity. We make it a point to make sure all our employees feel valued, belonging, and comfortable being their authentic selves at work. As a global company, we know diversity is our strength because it enables us to view things from different vista points and for you to bring value to the table in your own unique way.
#LI-Remote

TTEC is proud to be an equal opportunity employer. TTEC embraces and is committed to building a diverse and inclusive workforce that respects and empowers the cultures and perspectives within our global teams. We strive to reflect the communities we serve by not only delivering amazing service and technology, but also humanity. We make it a point to make sure all our employees feel valued and comfortable being their authentic selves at work. As a global company, we know diversity is our strength. It enables ...