Remote InfoSec Engineer - SOC & Threat Hunting

TTEC; Hartford (CT); Remote; USD 65,000 - 70,000; Full time

Benefits offered by this job

An annual incentive program

Medical, dental, and vision

Tax-advantaged health care accounts

Financial and income protection

Paid time off and wellness time off

Tuition reimbursement and access to e‑

Job summary

TTEC is seeking an Information Security Engineer to join our Information Security teams, with remote work available in the United States. You will investigate security alerts, hunt threats, and coordinate containment and remediation with system owners.

Collaborate with IT Operations and Engineering, maintain awareness of threats, and document actions with playbooks to support recovery and incident closure. Strong communication and cloud-security skills are required.

Qualifications

• Hands-on SOC experience investigating and responding to security events across multiple technologies.
• Partner with Threat Management to develop, test, and refine detection queries and playbooks.
• Validate detections against event data and document telemetry gaps and improvements.
• Investigate cloud security events by reviewing access permissions, logs, and controls.
• Strong knowledge of TCP/IP, DNS, HTTP/S, and common security logs; excellent communication.

Responsibilities

• Correlate SIEM alerts with endpoint activity and logs to build incident timelines.
• Understand the environment and engage with IT and engineering teams for knowledge.
• Identify intrusion attempts and compromises through analysis of event data.
• Document incident severity, scope, and actions; follow playbooks and coordinate containment.

Skills

SIEM

EDR

Threat hunting

Incident response

Cloud security

Education

IT degree or training

Tools

NGFW

Cloud platforms

Job description

TTEC is seeking an Information Security Engineer to join our Information Security teams, with remote work available in the United States. You will investigate security alerts, hunt threats, and coordinate containment and remediation with system owners.

Collaborate with IT Operations and Engineering, maintain awareness of threats, and document actions with playbooks to support recovery and incident closure. Strong communication and cloud-security skills are required.