Information Security Engineer (GIAC Required)

Strategic Staffing Solutions; Charlotte (NC); Hybrid; USD 90,000 - 120,000; Full time

Job summary

Strategic Staffing Solutions seeks a Senior Information Security Engineer to join the Threat Disruptions team. The role involves reviewing security logs, leading incident responses, and mitigating phishing attacks.

Candidates should have over 4 years of experience in Information Security Engineering, with strong investigative skills and familiarity with tools like enterprise SIEM. This position is hybrid, based in Charlotte, NC, with potential flexibility for Chandler, AZ, and McLean, VA.

Qualifications

• 4+ years of Information Security Engineering experience or equivalent.
• Ability to handle and mitigate phishing attacks.
• Experience in managing complex security issues.

Responsibilities

• Review and correlate security logs.
• Lead response activities for security incidents.
• Conduct digital forensics post-incident.

Skills

Information Security Engineering

Phishing attack mitigation

Risk assessments

Network log analysis

Problem solving

Education

4+ years of relevant experience

Tools

Enterprise SIEM solution

IDS/IPS

Endpoint security solutions

Job description

Location: Charlotte, NC (Hybrid) - Open to Chandler, AZ and McLean, VA

Duration: 18 Month Contract

W2 ONLY, NO C2C

Overview

S3 is seeking a Senior Information Security Engineer in Threat Disruptions team within the Advanced Operational Services (AOS) organization.

Responsibilities

• Review and correlate security logs
• Play a major role in phishing disruption efforts, including creation of new logic and procedures to identify phishing attacks impacting customers and employees
• Lead or participate in computer security incident response activities for moderately complex events
• Conduct technical investigation of security related incidents and post incident digital forensics to identify causes and recommend future mitigation strategies
• Provide security consulting on projects for internal clients to ensure conformity with corporate information, security policy, and standards
• Design, document, test, maintain, and provide issue resolution recommendations for moderately complex security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security
• Utilize subject matter knowledge in industry leading security solutions and best practices to implement one or more components of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity
• Identify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternatives
• Collaborate and consult with peers, colleagues and managers to resolve issues and achieve goals

Required Qualifications

4+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Desired Qualifications

• Advanced Information Security technical skills
• Experience detecting and mitigating phishing attacks directed towards employees and the company brand
• Experience creating regular expressions and YARA rules
• Ability to manage complex issues and develop solutions
• Experience in one or more of the following security disciplines: information security monitoring; incident response; vulnerability management; host/network forensics; cyber-crime investigations; Domain-based Message Authentication, Reporting and Conformance (DMARC); or cyber threat intelligence.
• Ability to execute in a fast paced, high demand, environment while balancing multiple priorities
• Certifications in one or more of the following: Global Information Assurance Certification (GIAC)
• Hands‑on experience with information security tools such as an enterprise SIEM solution, IDS/IPS, endpoint security solutions, email/web security gateways, and other security detection/mitigation devices
• Experience with host and/or network log analysis as applied to incident response / threat hunting
• Knowledge of offensive security, with the ability to think like an adversary when hunting and responding to incidents
• Strong experience in operating system and application security hardening and best practices
• Strong investigative mindset with an attention to detail
• Advanced problem solving skills, ability to develop effective long-term solutions to complex problems