Information Security Engineer

DeWinter BH; Foster City (CA); Ibrido; USD 140.000 - 210.000; Part-time

Vantaggi offerti da questo lavoro

Hybrid work arrangement

Descrizione del lavoro

DeWinter Group is seeking an Information Security Engineer in Foster City, CA, to strengthen security operations through automation, threat hunting, and advanced detection engineering. The role focuses on maintaining SIEM and SOAR platforms, developing automated response workflows, and tuning detection capabilities while investigating sophisticated cyber threats.

The ideal candidate has 6+ years in security engineering, hands-on SOC experience, and strong Python scripting for security

Competenze

• 6+ years in security engineering supporting SOC or similar
• Experience with SIEM platforms: detection rules, dashboards, alert tuning
• Experience with SOAR platforms (XSOAR, Splunk SOAR, or Tines)
• Python for security automation and integrations
• Strong incident response methodologies and threat intelligence knowledge
• Familiarity with MITRE ATT&CK and NIST frameworks
• Ability to build automation workflows for threat detection and response
• API-based tool integrations and threat intel feeds
• Threat hunting experience
• Excellent documentation skills and cross-functional collaboration

Mansioni

• Support SOC operations with detection engineering and threat hunting
• Maintain and optimize SIEM and SOAR platforms
• Develop automated response workflows and playbooks
• Tune detection rules, dashboards, and alerts for accuracy
• Investigate sophisticated cyber threats and incidents
• Collaborate with Information Security and cross-functional teams
• Document detection rules, workflows, and incident procedures

Conoscenze

SOC experience

SIEM platforms

SOAR platforms

Python for security automation

Incident response

Threat intelligence

APIs & scripts

Threat hunting

Documentation

Cross-functional collaboration

Strumenti

Palo Alto Cortex XSOAR

Splunk SOAR

Tines

Python

Descrizione del lavoro

Information Security Engineer

Strengthen enterprise security operations through automation, threat hunting, and advanced detection engineering. This Information Security Engineer will help improve the organization’s security posture by maintaining and optimizing SIEM and SOAR platforms, developing automated response workflows, tuning detection capabilities, and investigating sophisticated cyber threats. The role is ideal for a hands-on security professional who combines strong SOC experience with Python scripting, analytical problem-solving, and a passion for building efficient, scalable security processes.

Required Skills

• 6+ years of experience in security engineering supporting a Security Operations Center (SOC) environment or similar function
• Strong experience with SIEM platforms, including:
• Detection and correlation rule development
• Dashboard and report creation
• Alert analysis and tuning
• Demonstrable experience with SOAR platforms such as Palo Alto Cortex XSOAR, Splunk SOAR, or Tines
• Experience creating, managing, and optimizing SOAR playbooks
• Proficiency in Python for security automation, scripting, and custom integrations
• Strong understanding of incident response methodologies and threat intelligence
• Knowledge of cybersecurity frameworks, including MITRE ATT&CK and NIST
• Experience building automation workflows for threat detection, alert triage, and incident response
• Ability to integrate security tools and threat intelligence feeds using APIs and custom scripts
• Experience conducting proactive threat hunting and identifying indicators of compromise
• Strong analytical and problem-solving skills
• Ability to collaborate effectively with Information Security and cross-functional teams
• Strong technical documentation skills, including documenting detection rules, automation workflows, and incident response procedures
• Ability to work effectively in a fast-paced environment

Nice to Have Skills

• Relevant industry certification such as CISSP, GCIH, or a similar credential
• Experience with cloud security and cloud environments, including AWS, Azure, or GCP
• Familiarity with PowerShell, Bash, or other scripting languages
• Knowledge of network security and endpoint security solutions

Preferred Education and Experience

• Preferred education information was not provided.
• 6+ years of professional experience in Security Engineering, SOC operations, threat detection, incident response, or a related cybersecurity function is preferred.
• Experience maintaining security platforms and developing automated security workflows is strongly preferred.

Other Requirements

• Work arrangement: Hybrid
• Location: Foster City, CA
• Engagement: 6-month contract
• Work authorization arrangement: W2 only
• Ability to support security operations, threat hunting, automation development, and incident response activities in a collaborative environment
• Start date: ASAP