Information Security Engineer II

IDEMIA Public Security; United States; On-site; USD 90,000 - 140,000; Full time

Job summary

IDEMIA Public Security is seeking a security operations professional to analyze security event data, triage incidents, and coordinate responsive actions across internal teams and external partners. You will develop incident response playbooks and contribute to threat detection efforts using SIEM/EDR tools.

The role requires hands-on incident response experience, familiarity with MITRE ATT&CK, and relevant certifications.

Qualifications

• Bachelor’s degree in computer science, information technology, cybersecurity, or related field (or equivalent experience).
• 3+ years of experience in security operations or cybersecurity roles.
• 2+ years hands-on with SIEM and EDR technologies.
• Fundamental understanding of SIEM technologies, log management, and security analytics.
• Hands-on incident response experience.
• Experience with scripting languages such as Python, PowerShell, or Bash.
• Familiarity with MITRE ATT&CK framework and threat intelligence concepts.
• Security certifications such as Splunk Power User/Admin, CISSP, CEH, or Security+.

Responsibilities

• Analyze security event data to identify potential threats and vulnerabilities.
• Triage, investigate, and respond to alerts and security incidents, coordinating with internal teams and external stakeholders.
• Develop and implement incident response plans, playbooks, and procedures.
• Contribute to detection efforts by assisting in the creation of requests for new detections and tuning detections.
• Assist the Incident Response Lead in coordinating with the company’s Managed Security Service Provider and additional Incident Response forensics resources as appropriate.
• Continuously monitor Splunk for security events, respond and resolve security incidents, create new alerts and suppressions.
• Create Splunk searches to identify the latest threats and risks to the organization, threat hunting.
• Utilize EDR tools to investigate incidents and monitor malicious activity.
• Maintain security awareness by researching current threats and vulnerabilities and escalating any risks for remediation.
• Support compliance initiatives by generating reports and audits using Cybersecurity tools.

Skills

Security operations

Incident response

Analytical skills

Communication

Team collaboration

Scripting (Python/PowerShell)

Education

Bachelor’s degree in CS/IT/Cybersecurity

Equivalent experience

Tools

SIEM

EDR tools

Splunk

MITRE ATT&CK

Job description

Overview
IDEAMIA Public Security, a division of IDEMIA Group, is the leading provider of secure and trusted biometric-based solutions, transforming public and private organizations across the globe. Our industry-enabled and client-specific solutions draw upon decades of expertise in biometrics to revolutionize the fields of public security, justice and public safety, travel and transport, identity, and access control. Built on privacy and trust, our market-leading iris, fingerprint and facial recognition solutions top independent benchmarking for accuracy, fairness and scalability. These exacting standards enable our clients to build safer, fairer societies where people can live, interact, and move about freely. With 4000+ employees around the world and 150+ partners worldwide, we offer more than just a job - we provide a dynamic environment where innovation thrives, opportunities abound, and your talents are valued. Be part of a global leader shaping the future of biometric based technology. Learn more

Overview
IDEAMIA Public Security, a division of IDEMIA Group, is the leading provider of secure and trusted biometric-based solutions, transforming public and private organizations across the globe. Our industry-enabled and client-specific solutions draw upon decades of expertise in biometrics to revolutionize the fields of public security, justice and public safety, travel and transport, identity, and access control. Built on privacy and trust, our market-leading iris, fingerprint and facial recognition solutions top independent benchmarking for accuracy, fairness and scalability. These exacting standards enable our clients to build safer, fairer societies where people can live, interact, and move about freely. With 4000+ employees around the world and 150+ partners worldwide, we offer more than just a job - we provide a dynamic environment where innovation thrives, opportunities abound, and your talents are valued. Be part of a global leader shaping the future of biometric based technology. Learn more here .

Responsibilities

• Analyze security event data to identify potential threats and vulnerabilities.
• Triage, investigate, and respond to alerts and security incidents, coordinating with internal teams and external stakeholders.
• Develop and implement incident response plans, playbooks, and procedures.
• Contribute to detection efforts by assisting in the creation of requests for new detections as well as tuning detections.
• Assist the Incident Response Lead in coordinating with the company’s Managed Security Service Provider and additional Incident Response forensics resources, as appropriate.
• Continuously monitor Splunk for security events, respond and resolve security incidents, create new alerts and suppressions.
• Create Splunk searches to identify the latest threats and risks to the organization, threat hunting.
• Utilize additional security tools, i.e., Endpoint Detection Response (EDR) tools to investigate incidents and monitor malicious activity.
• Maintain security awareness by researching current threats and vulnerability and escalating any associated risks for remediation.
• Support compliance initiatives by generating reports and audits using Cybersecurity tools.

Qualifications

• Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related field (or equivalent experience).
• 3+ years of experience in security operations or cybersecurity roles.
• 2+ years of hands-on experience with SIEM and EDR technologies
• Fundamental understanding of SIEM technologies, log management, and security analytics.
• Hands-on experience conducting incident response investigations and related activities.
• Experience with scripting languages such as Python, PowerShell, or Bash is a plus.
• Familiarity with MITRE ATT&CK framework and threat intelligence concepts.
• Security certifications such as Splunk Certified Power User, Splunk Certified Admin, CISSP, CEH, or Security+ are a plus.
• Ability to work independently and collaboratively in a fast-paced environment.
• Excellent problem-solving, communication, and analytical skills.

Note to third-party recruiters: IDEMIA Public Security does not work with third-party recruiters absent a signed agreement and will treat any resumes submitted without a signed agreement as the property of IDEMIA Public Security. In the event that IDEMIA Public Security hires a candidate who was brought to our attention by a recruiter who does not have a signed agreement, IDEMIA Public Security will not pay any fees to the recruiter as a result of the hire.