Security Engineer: SIEM & Incident Response

Atmos Energy Corporation; United States; On-site; USD 110,000 - 150,000; Full time

Job summary

Atmos Energy Corporation is actively seeking a security-focused professional to manage SIEM, analyze incidents from diverse sources, and guide responders through containment and resolution. The role demands independent thinking to separate genuine threats from false alarms and to develop actionable investigations.

Responsibilities include incident reporting, deploying security controls, and maintaining up-to-date threat knowledge.

Qualifications

• Bachelor's degree in Computer Science or related field and 4+ years in information security.
• Experience on CIRT/CERT/CSIRC or SOC preferred.
• Proficient with SIEM solutions, vulnerability management, log analysis, and network security concepts.
• Experience with scripting (Python, Unix tools) and security incident handling.

Responsibilities

• Manages SIEM and analyzes incidents from multiple sources for severity and risk.
• Prioritizes incidents and advises responders on investigation steps.
• Identifies, reports and resolves security incidents with resources.
• Composes security alert notifications and deploys controls to detect events.
• Maintains knowledge of threats and trends from ICS-CERT and related bodies.
• Develops periodic reporting and trend analyses; tunes to reduce false positives.
• Writes programs and routines to automate security triage tasks.
• Acts as interface between users and IT engineering/security operations.
• Participates in planning and execution of contracted services with outside vendors.

Skills

CIRT/SOC experience

SIEM administration

Incident response

Network traffic analysis

Python scripting

Unix/Linux and Windows

Vulnerability assessment

PCI/compliance knowledge

Communication skills

Education

Bachelor's degree in Computer Science or related field

Tools

SIEM (LogRhythm)

Forensics tools

Vulnerability tools

Job description

Atmos Energy Corporation is actively seeking a security-focused professional to manage SIEM, analyze incidents from diverse sources, and guide responders through containment and resolution. The role demands independent thinking to separate genuine threats from false alarms and to develop actionable investigations.

Responsibilities include incident reporting, deploying security controls, and maintaining up-to-date threat knowledge.