Security Engineer Level 3

MaximaTek; Blue Ash (OH); On-site; USD 68,000 - 97,000; Full time

Job summary

Kroger is seeking a Senior Security Engineer / Incident Response for a 12+ month contract-to-hire engagement at our Blue Ash, OH location. You will support day-to-day Security Operations, investigate security events, and lead containment, eradication, and recovery across endpoints, cloud, and identity-related incidents.

This senior IC role requires strong communication and mentoring abilities. The position requires onsite work 5 days/week at BTC - 11450 Grooms Road, Blue Ash, OH 45242.

Qualifications

• Strong experience in Security Operations, investigations, and incident response.
• Hands-on experience investigating and responding to security events and incidents.
• Experience supporting containment, eradication, and recovery activities.
• Familiarity with SIEM/SOAR, EDR, email security gateways, and firewalls.
• Ability to develop or maintain security playbooks and runbooks.

Responsibilities

• Lead containment, eradication, and recovery for incidents across endpoints, cloud, and identity.
• Act as escalation point for complex security events and incidents.
• Investigate events and determine appropriate response actions.
• Contribute to development and improvement of security playbooks and runbooks.
• Provide feedback to improve detections, enrichment, and automated response; collaborate across teams.

Skills

Security Operations

Incident Response

Containment Leadership

Communication Skills

Mentoring

Threat Detection

Cross-functional Collaboration

Hands-on Investigations

Tools

SIEM/SOAR

EDR

Firewalls

Email Gateways

Threat Intel

Job description

Alternate Title: Senior Security Engineer / Incident Response

Job Duration: 12 + Months

Job Category: Engineer

Employment Type: Contract-to-Hire; Work Location

Preferences: Onsite Location: BTC - 11450 Grooms Road, Blue Ash, OH, 45242, US

Number of Positions: 1

Client: Kroger

Rate: $60 on W2

Job Description :

• The Senior Security Engineer will support day-to-day Security Operations, with a focus on investigating security events and responding to complex security incidents. This person will lead containment, eradication, and recovery efforts across endpoint, cloud, and identity-related incidents and serve as an escalation point for more complex security events. This is a senior-level individual contributor role requiring strong Security Operations experience, critical thinking, attention to detail, and the ability to communicate effectively in high-pressure situations. The ideal candidate will be able to break down complex technical information and communicate clearly with both technical and non-technical stakeholders.

Requirements:

• Strong experience in Security Operations, security investigations, and incident response.
• Hands-on experience investigating and responding to security events and incidents.
• Experience supporting containment, eradication, and recovery activities.
• Experience with security alerts and detections.
• Experience developing or maintaining security playbooks and/or runbooks.
• Understanding of Security Operations tooling such as SIEM/SOAR, EDR, email security gateways, and firewalls.
• Strong critical-thinking and problem-solving skills.
• Ability to break down complex technical topics and communicate them clearly to technical and non-technical audiences.
• Strong written and verbal communication skills.
• Demonstrated leadership within an individual contributor role.
• Experience mentoring junior team members.

Nice-to-Haves:

• Experience with detection engineering.
• Experience with rule or alert tuning.
• Familiarity with the MITRE ATT&CK framework, including mapping security activity or detections to relevant tactics and techniques.
• Experience with cloud environments such as Azure, GCP, or AWS.
• Familiarity with Google Security Operations.
• Experience contributing to tabletop exercises or security audits Key Responsibilities.
• Lead containment, eradication, and recovery efforts for endpoint, cloud, identity, and other security incidents.
• Serve as an escalation point for complex security events and incidents.
• Investigate security events and determine appropriate response actions.
• Contribute to the development and improvement of security playbooks and runbooks.
• Provide feedback to the Detection team to improve the quality of detections, enrichment, and automated response.
• Collaborate with cross-functional teams to improve logging visibility and response readiness.
• Contribute to operational maturity through playbooks, mentoring, tabletop exercises, detections, and audits.
• Mentor junior team members and help build their Security Operations capabilities.
• Communicate technical information effectively to both technical and non-technical stakeholders

NOTES:

• This is a 12+ month contract-to-hire opportunity, supporting Corporate Information Security for KTD.
• Candidates will be required to be on-site 5 days/week at the BTC (11450 Grooms Road, Blue Ash, OH, 45242).
• Preference for local candidates. If not local but can relocate on day 1, please indicate in the summary.
• This is a senior-level individual contributor role with no direct reports.
• Candidates should have directly relevant Security Operations and investigation experience. Lack of relevant hands-on experience will be a disqualifier.