Information Security Operations Engineer

Connect Tech+Talent; Walnut Creek (CA); Hybrid; USD 90,000 - 120,000; Full time

Job summary

A leading company is seeking an Information Security Operations Engineer to enhance their security operations team. This role involves implementing security monitoring tools and responding to cyber incidents, requiring a blend of technical expertise and proactive problem-solving skills. The ideal candidate will have experience in security operations and a customer-focused approach to security issues.

Qualifications

• Minimum 2 years of experience in security operations or incident response.
• Relevant certifications such as GCIH, GCIA are a plus.

Responsibilities

• Perform security analysis similar to SOC Tier 2 functions.
• Manage network security protocols, tools, and technologies.
• Handle security incident response and analysis.

Skills

Security Operations

Incident Response

Risk Mitigation

Problem-Solving

Education

Bachelor’s degree in Computer Science

Bachelor’s degree in Information Security

Tools

Splunk

Microsoft Defender

Proofpoint

AWS

Azure

Job description

Information Security Operations Engineer

Direct message the job poster from Connect Tech+Talent

Position: Information Security Operations Engineer

Location: Hybrid (2 days onsite) - Walnut Creek, CA or Phoenix, AZ

Type: Contract

Overview:

We are seeking a skilled and experienced Information Security Operations Engineer to join our dynamic security operations team. The role involves supporting the implementation and maintenance of security monitoring and alerting tools to safeguard our organization's systems, networks, and data. The ideal candidate will possess a blend of hands-on technical expertise, experience in security operations, incident response, risk mitigation, and security best practices. They should be proactive, organized, analytical, detail-oriented, and persistent.

Security Operations is a critical support function for the Information Security team, providing threat insights and rapid response to cyber incidents. Given the maritime industry's targeted cyber threats, vigilance and quick recovery responses are essential.

Key Responsibilities:

• Perform security analysis similar to SOC Tier 2 functions
• Manage network security protocols, tools, and technologies (BGP, TCP/IP, DNS, SMTP, SSL, etc.)
• Understand network and system architecture, including cloud environments (AWS, Azure)
• Operate firewalls, monitoring tools, IDS/IPS systems
• Handle security incident response and analysis
• Utilize SIEM tools for log analysis and correlation
• Manage vulnerability assessments and tools
• Ensure system and network security, authentication, and protocols
• Work with tools such as Splunk, Microsoft Defender, Proofpoint, Office 365, PowerShell
• Experience with cloud security tools like Data Explorer, GuardDuty, Log Analytics
• Proficiency with Unix/Linux, Windows, SQL, shell scripting
• Conduct security research and root cause analysis
• Communicate technical findings effectively to executives
• Work independently and collaboratively in a team
• Understand web vulnerabilities (XSS, CSRF, etc.)
• Problem-solving and stakeholder influence skills
• Customer-focused approach to security issues
• Ability to multi-task in a fast-paced environment
• Physical ability to lift equipment up to 50 pounds

Qualifications:

• Minimum 2 years of experience in security operations or incident response
• Bachelor’s degree in Computer Science, Information Security, or related field (preferred)
• Relevant certifications such as GCIH, GCIA are a plus

Additional Details:

• Seniority level: Mid-Senior level
• Employment type: Contract
• Job functions: Information Technology
• Industry: Computer and Network Security