Security Engineer, Incident Response

Eliassen Group; Burbank (CA); Hybrid; Confidential; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401k with company matching

Life insurance

Job summary

Eliassen Group is seeking a Security Engineer, Incident Response for a 3-month contract in Burbank, CA, with hybrid on-site work. The role focuses on investigating and managing third-party security incidents, coordinating remediation, and communicating findings to stakeholders across the enterprise.

The ideal candidate has 5+ years in IT and at least 3 years in information security, with experience in incident response, SOC operations, and forensics.

Qualifications

• 5+ years of IT or technology experience.
• 3+ years in information security.
• Experience in Incident Response, SOC Operations, Digital Forensics, Detection Engineering, or Threat Hunting.
• Knowledge of information security principles, networks, OS, web app security, and incident investigations.
• Experience with log analysis and security investigations.
• Excellent written and verbal communication for documentation and briefings.

Responsibilities

• Investigate and respond to third-party security incidents affecting vendors, suppliers, and partners.
• Perform incident triage, containment, eradication, root cause analysis, and remediation.
• Analyze security events through log review, forensic analysis, and other investigative techniques.
• Assess residual risk and recommend remediation actions.
• Track and document incidents within security tools and processes.
• Prepare reports and briefings for technical and non-technical stakeholders.
• Collaborate with internal Incident Response, Security Operations, and Technology teams.
• Follow established Incident Response procedures and security standards.

Skills

Incident Response

SOC Operations

Digital Forensics

Threat Hunting

Strong Communication

Python/Scripting

Cloud Security (AWS/Azure/GCP)

EDR (CrowdStrike, SentinelOne, Tanium)

SIEM/SOAR

CISSP/GIAC (GCIH/GCFA/GCIA/GCED/GSEC)

Tools

CrowdStrike

SentinelOne

Tanium

Cortex XDR

SIEM

SOAR

Job description

Description

Hybrid 4 Days a week on-site in Burbank, CA

Our client has an opportunity for a Security Engineer, Incident Response on an initial 3-month contract with expected extensions. The role will provide additional coverage while full-time team members are on leave and will focus on investigating and managing third-party security incidents affecting vendors, suppliers, and business partners. The ideal candidate has experience in incident response, security operations, digital forensics, or threat hunting and can assess third-party security events, determine business risk, coordinate remediation efforts, and communicate findings to stakeholders across the enterprise.

Due to client requirements, applicants must be willing and able to work on a w2 basis. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance.

Rate: $55.00 to $63.50/hr. w2

Responsibilities

• Investigate and respond to third-party security incidents impacting vendors, suppliers, and partners.
• Perform incident triage, containment, eradication, root cause analysis, and remediation activities.
• Analyze security events through log review, forensic analysis, and other investigative techniques.
• Assess residual risk and recommend appropriate remediation actions.
• Track and document incidents within established security tools and processes.
• Prepare reports, briefings, and presentations for technical and non-technical stakeholders.
• Collaborate with internal Incident Response, Security Operations, and Technology teams.
• Follow established Incident Response procedures and security standards.

Experience Requirements

• 5+ years of overall IT or technology experience.
• 3+ years of experience in information security.
• Experience in Incident Response, SOC Operations, Digital Forensics, Detection Engineering, or Threat Hunting.
• Understanding of information security principles, network and infrastructure security, web application security, operating systems, networking fundamentals, and incident investigation methodologies.
• Experience performing log analysis and security investigations.
• Strong written and verbal communication skills with technical documentation and report-writing abilities.
• Ability to manage multiple priorities in a fast-paced environment.
• Problem-solving and analytical skills.
• Preferred: Python or scripting experience, cloud security across AWS/Azure/GCP, EDR platforms such as CrowdStrike, SentinelOne, Tanium, Cortex XDR, SIEM and/or SOAR solutions, and certifications such as CISSP or GIAC (GCIH, GCFA, GCIA, GCED, GSEC).