Security Automation & Incident Response Engineer

Babel Street

Reston (VA)

On-site

USD 100,000 - 110,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

Health Benefits

401(K) match

Unlimited flexible leave

12 federal holidays

Tuition reimbursement

Job summary

Babel Street seeks an Information Security Engineer to advance its security program. The role focuses on monitoring alerts, investigating incidents, and automating repetitive tasks across cloud and on‑prem environments.

You will work with XDR/EDR tools, Entra ID, and playbooks while collaborating with IT, Cloud, and Engineering teams to strengthen security posture. Strong scripting and problem‑solving are essential.

Qualifications

Bachelor’s degree in Cybersecurity, Cyber Operations, Systems Security Engineering, Computer Science, Information Assurance, or related field.
3+ years of experience in Information Security, Security Operations, or Security Engineering.
Experience with Microsoft XDR.
Experience with CrowdStrike Falcon.
Experience with Microsoft Entra ID (including Risky Users and Identity Protection).
Working knowledge of AWS, Azure, and Google Cloud Platform (GCP).
Experience investigating security incidents.
Experience writing PowerShell, Python, or similar scripting languages.
Experience developing automations and operational workflows.
Experience creating, maintaining, and improving security run books, SOPs, and incident response playbooks.

Responsibilities

Monitor, investigate, and respond to security alerts and incidents.
Administer Microsoft XDR, CrowdStrike Falcon, and Microsoft Entra ID.
Investigate phishing, identity attacks, endpoint detections, account compromise activity, and other security events.
Develop scripts, automations, and operational workflows to improve efficiency and reduce manual effort.
Create, maintain, and improve security run books, SOPs, and incident response playbooks.
Document investigations, findings, technical procedures, and operational processes.
Assist with vulnerability management and remediation efforts.
Coordinate with Infrastructure, Cloud, IT, and Engineering teams to resolve security findings.
Research emerging threats, attack techniques, and security technologies.
Utilize AI tools to improve research, scripting, documentation, troubleshooting, and engineering productivity.
Recommend and implement improvements to security processes, detections, workflows, and automations.
Participate in security projects and perform additional duties as assigned.