Security Engineer (Incident Response)- Major Entertainment Company- NO H1B OR C2C

TechLink Resources, Inc; Los Angeles (CA); On-site; USD 95,000 - 140,000; Full time

Job summary

TechLink Resources, Inc. in Los Angeles seeks an experienced Security Engineer – Incident Response to join a Global Information Security team. You will investigate, analyze, and respond to cybersecurity incidents affecting third‑party vendors and partners.

The role emphasizes hands‑on incident response, SOC operations, digital forensics, threat hunting, and security operations, with strong written and verbal communication to technical and non‑technical stakeholders.

Qualifications

• 5+ years of overall technology experience.
• 3+ years of information security experience.
• Hands-on experience within Incident Response, SOC, Digital Forensics, Threat Hunting, or Detection.
• Strong understanding of information security principles, practices, and procedures.
• Preferred CISSP or SANS/GIAC certifications such as GCIH, GCFA, GCIA, GCED, or GSEC.

Responsibilities

• Investigate and respond to third-party cybersecurity incidents.
• Perform incident triage, containment, eradication, remediation, and root cause analysis.
• Conduct in-depth technical investigations, including log analysis and digital forensic analysis.
• Evaluate the potential business and security impact of incidents.
• Determine residual risk and appropriate remediation steps.
• Document and track incident response activities.
• Prepare incident reports, briefings, and presentations for leadership and security partners.
• Work closely with Incident Response, Information Security, engineering, technology, and business teams.
• Follow established Incident Response processes and procedures.

Skills

Incident Response

SOC operations

Digital Forensics

Threat Hunting

Security Operations

Log analysis

Tools

CrowdStrike

SentinelOne

Cortex XDR

Tanium

Job description

We are seeking an experienced Security Engineer – Incident Response to join a Global Information Security team and help investigate, analyze, and respond to cybersecurity incidents impacting third-party vendors, suppliers, and business partners.

This role is ideal for a security professional with hands-on experience in Incident Response, SOC operations, Digital Forensics, Threat Hunting, or Security Operations who is comfortable investigating complex security events and communicating risk to both technical and non-technical stakeholders.

What You'll Do

• Investigate and respond to third-party cybersecurity incidents
• Perform incident triage, containment, eradication, remediation, and root cause analysis
• Conduct in-depth technical investigations, including log analysis and digital forensic analysis
• Evaluate the potential business and security impact of incidents
• Determine residual risk and appropriate remediation steps
• Document and track incident response activities
• Prepare incident reports, briefings, and presentations for leadership and security partners
• Work closely with Incident Response, Information Security, engineering, technology, and business teams
• Follow established Incident Response processes and procedures

Required Experience

• 5+ years of overall technology experience
• 3+ years of information security experience
• Hands-on experience within Incident Response, SOC, Digital Forensics, Threat Hunting, or Detection
• Strong understanding of information security principles, practices, and procedures
• Understanding of:
• Web application security
• Infrastructure and Internet security
• Operating systems
• Networking protocols
• Databases
• Ability to quickly assess security incidents and identify, isolate, and communicate risks
• Strong technical writing and documentation skills
• Excellent written and verbal communication skills
• Ability to manage multiple incidents and priorities in a fast-paced environment

Preferred Qualifications

• Experience with EDR tools such as CrowdStrike, SentinelOne, Cortex XDR, or Tanium
• Experience with SIEM and/or SOAR platforms
• Experience responding to incidents within AWS, Azure, or GCP
• Python or other scripting experience
• CISSP certification
• SANS/GIAC certifications such as GCIH, GCFA, GCIA, GCED, or GSEC

#CyberSecurity #IncidentResponse #SecurityEngineer #SOC #DigitalForensics #ThreatHunting #InformationSecurity #CloudSecurity #SIEM #CyberSecurityJobs