Security Engineer

Hana Cloud Solutions; Carlstadt (NJ); On-site; USD 87,000 - 134,000; Full time

Benefits offered by this job

Health, Dental & Vision insurance

401(k) Retirement Plan with up to 5%

Life Insurance and AD&D

Company provided lunch

Paid time off and Paid holidays

Celebration & Condolence Benefits

Smart Card points program

Holiday Gift certificates

FSA / DCFSA

Employee Assistance Program (EAP)

Job summary

Hana Cloud Solutions is seeking a security engineer to monitor and manage security tools, coordinate with an external SOC, and act as a first responder on incidents. The role focuses on detection engineering, threat hunting, and cloud security across AWS environments.

The ideal candidate has 4+ years in information security, hands-on SIEM/XDR experience, and a background in incident response and forensics. PCI-DSS and external audits experience is valued.

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field.
• 4+ years of experience in information security, security engineering, security operations, or IT infrastructure (level I or II based on experience).
• Hands-on experience with SIEM/XDR, endpoint protection, vulnerability scanners, alert analysis, triage, and patch coordination.
• Experience in security incident response and forensic analysis, and knowledge of MITRE ATT&CK.
• Familiarity with detection engineering, threat hunting, and security automation including SOAR platforms.

Responsibilities

• Monitor and manage security tools including XDR/EDR, SIEM, vulnerability scanners, and email security.
• Coordinate with external SOC on alert triage and escalation; document alert dispositions; escalate confirmed incidents.
• Act as first responder on security incidents; perform triage, containment, evidence collection with chain-of-custody; conduct forensic analysis.
• Develop, tune, and test SIEM detection rules, correlation logic, and SOAR playbooks.
• Conduct proactive threat hunting across endpoint, network, and cloud telemetry; support purple team exercises with SOC.
• Monitor threat intel sources and turn advisories into detection signatures; prioritize vulnerabilities.
• Run vulnerability scans and track remediation; coordinate with IT on overdue items.
• Perform web app security assessments and internal pentests; coordinate external pentest engagements.
• Collect and maintain PCI-DSS evidence; perform access reviews and configuration audits; support external audits.
• Implement and maintain security controls on AWS (WAF, security groups, network ACLs); support firewall rule management.
• Support PAM operations, USB/external storage controls, endpoint compliance; advance Zero Trust initiatives.
• Lead or participate in security projects (PAM deployment, tool rollouts, compliance).
• Run security awareness training and phishing simulations; manage training platform; track completion rates.
• Handle security account provisioning and onboarding/offboarding; maintain policies and runbooks; produce security metrics.

Skills

Security operations

SIEM/XDR

Incident response

Forensic analysis

Threat hunting

SOAR/Playbooks

Vulnerability management

Cloud security

AWS IAM/Security groups

Penetration testing basics

Scripting (Python/PowerShell/Bash)

Detection engineering

Education

Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field

Tools

Nessus

Kenna

Nmap

Burp Suite

Metasploit

OWASP

Job description

• Monitor and manage security tools, including XDR/EDR, SIEM, vulnerability scanners, and email security, and review security dashboards and alerts daily.
• Coordinate with the external SOC on alert triage and escalation, document alert dispositions (true positive, false positive, benign), and escalate confirmed incidents.
• Act as first responder on security incidents, handling triage, containment, evidence collection with chain-of-custody documentation, and forensic analysis.
• Develop, tune, and test SIEM detection rules, correlation logic, and SOAR playbooks to improve automated detection and response.
• Conduct proactive threat hunting across endpoint, network, and cloud telemetry, and support purple team exercises with the SOC.
• Monitor threat intelligence sources (NVD, CISA alerts, vendor bulletins), turn relevant advisories into detection signatures, and use them to prioritize vulnerabilities.
• Run vulnerability scans and assessments with tools such as Nessus and Kenna, track remediation and patch compliance, and follow up with IT teams on overdue items.
• Perform web application security assessments (OWASP Top 10) and internal penetration tests, and coordinate external penetration testing engagements and validation of their findings.
• Collect and maintain PCI-DSS compliance evidence, carry out access reviews (AD, AWS IAM) and configuration audits, and support external audits with technical walkthroughs.
• Implement and maintain security controls on AWS cloud infrastructure, including WAF rules, security groups, and network ACLs, and support firewall rule management.
• Support PAM operations, USB and external storage controls (SecurA), endpoint compliance monitoring, and Zero Trust initiatives such as micro-segmentation and identity verification.
• Lead or carry out assigned technical work on security projects such as PAM deployment, tool rollouts, and compliance initiatives.
• Run security awareness training and phishing simulation campaigns, manage the training platform, and track completion rates.
• Handle security account provisioning, access requests, and onboarding/offboarding security checklists, keep policies and runbooks up to date, and produce weekly and monthly security metrics reports.

Qualifications / Skills:

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field.
• 4+ years of experience in information security, security engineering, security operations, or IT infrastructure (level I or II based on experience).
• Solid knowledge of network security (TCP/IP, DNS, firewall, VPN, IDS/IPS, network segmentation) and operating system security and hardening (Windows Server, Linux).
• Hands-on experience operating security tools, including SIEM/XDR, endpoint protection, and vulnerability scanners (Nessus, Kenna, Nmap), and with alert analysis, triage, and patch coordination.
• Experience in security incident response and forensic analysis, and knowledge of common attack vectors (phishing, malware, ransomware) and the MITRE ATT&CK framework.
• Familiarity with detection engineering, threat hunting, and security automation, including SOAR platforms and playbook development.
• Scripting skills for security automation (Python, PowerShell, or Bash), and knowledge of penetration testing tools and methods (Burp Suite, Metasploit, OWASP).
• Cloud security experience, preferably AWS (IAM, Security Groups, CloudTrail).
• Experience with PCI-DSS or other compliance frameworks, ideally in retail, and experience working with an external SOC or MSSP is preferred.
• Certifications such as CompTIA Security+, CySA+, CEH, or GSEC are preferred; advanced certifications (CISSP, GCIA, GCIH, SSCP) are a plus.
• Bilingual in Korean and English preferred
• Health, Dental & Vision insurance / EAP (Employee Assistance Program) per company policy
• 401 (k) Retirement Plan with up to 5% match per company policy
• Life Insurance and AD&D (Accidental death & Dismemberment) per company policy
• BTA Insurance (Business Travel Accident Coverage)
• Company provided lunch
• Paid-time off (PTO) and Paid Holidays per company policy
• Celebration & Condolence Benefits per company policy
• Smart Card: Earn additional 4 points to the standard $1 = 1 point
• Holiday Gift certificates per company policy
• FSA (Flexible Spending Account) per company policy
• DCFSA (Dependent Child Care Spending Account) per company policy

Work Hours

• MON-FRI, 8:30am to 5:30pm

Compensation

• $87,450 - 134,200 per year

*Actual compensation will be determined based on relevant experience, qualifications, skills, and other job-related factors.

Equal Opportunity Employer
This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor.