Security Engineer I — Incident Response & SIEM

Lendistry; California; On-site; USD 84,000 - 118,000; Full time

Benefits offered by this job

Comprehensive medical, dental, and vis

Paid time off

Birthday day off

401(k) match

FSA/HSA

Paid life and disability insurance

Pet insurance

Professional development courses

In-office snacks and drinks

Gym facilities (LA & Tustin/CEC)

In-office engagement activities

Job summary

Lendistry is seeking a Security Engineer I to manage day-to-day security monitoring, incident response, and vulnerability management across corporate IT, cloud, and third-party environments. You will work closely with the Security Engineer Lead, SOC, MSSP, and IT teams to detect threats, respond quickly, and drive issues to closure without slowing business velocity.

This role is the first point of coordination for security events, requiring you to triage alerts, run playbooks, document status,

Qualifications

• 2–4 years of cybersecurity engineering, SOC, or incident response experience.
• Hands-on SIEM and EDR experience for alert triage and investigation.
• Familiarity with incident response lifecycle (NIST SP 800-61) and MITRE ATT&CK.
• Knowledge of AWS/Azure security services and cloud logging.
• Understanding of vulnerability management, CVSS scoring, and remediation.
• Knowledge of SOC 2 and ISO 27001 frameworks.
• Basic scripting ability (Python/PowerShell) for automation.
• Strong written and verbal communication for incident documentation.
• Bachelor’s degree or equivalent; relevant certifications are a plus.

Responsibilities

• Monitor, triage, and investigate security alerts from SIEM/EDR; escalate to Security Engineer Lead.
• Act as first responder and incident coordinator following playbooks.
• Maintain incident records, timelines, and evidence; support post-incident reviews.
• Provide incident status updates to IT, Legal, Compliance, and leadership.
• Collaborate with SOC and MSSP to validate alerts and refine procedures.
• Develop, test, and maintain incident response playbooks and runbooks.
• Tune detection rules to reduce false positives and improve coverage.
• Operate vulnerability tools, track remediation against SLAs.
• Assist with vendor security assessments and evidence for audits (SOC 2, ISO 27001).
• Build security metrics and dashboards and support tabletop exercises.
• Automate repetitive security tasks using scripting and platform capabilities.

Skills

Security engineering

SOC operations

Incident response

MITRE ATT&CK

Python/PowerShell scripting

Education

Bachelor’s degree or equivalent experience

Certifications (Security+, CySA+, GCIH, SC-200, AWS Security Specialty)

Tools

SIEM

EDR

Job description

Lendistry is seeking a Security Engineer I to manage day-to-day security monitoring, incident response, and vulnerability management across corporate IT, cloud, and third-party environments. You will work closely with the Security Engineer Lead, SOC, MSSP, and IT teams to detect threats, respond quickly, and drive issues to closure without slowing business velocity.

This role is the first point of coordination for security events, requiring you to triage alerts, run playbooks, document status,