Security Engineer: Threat Hunting & Incident Response

Hana Cloud Solutions; Carlstadt (NJ); On-site; USD 87,000 - 134,000; Full time

Benefits offered by this job

Health, Dental & Vision insurance

401(k) Retirement Plan with up to 5%

Life Insurance and AD&D

Company provided lunch

Paid time off and Paid holidays

Celebration & Condolence Benefits

Smart Card points program

Holiday Gift certificates

FSA / DCFSA

Employee Assistance Program (EAP)

Job summary

Hana Cloud Solutions is seeking a security engineer to monitor and manage security tools, coordinate with an external SOC, and act as a first responder on incidents. The role focuses on detection engineering, threat hunting, and cloud security across AWS environments.

The ideal candidate has 4+ years in information security, hands-on SIEM/XDR experience, and a background in incident response and forensics. PCI-DSS and external audits experience is valued.

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field.
• 4+ years of experience in information security, security engineering, security operations, or IT infrastructure (level I or II based on experience).
• Hands-on experience with SIEM/XDR, endpoint protection, vulnerability scanners, alert analysis, triage, and patch coordination.
• Experience in security incident response and forensic analysis, and knowledge of MITRE ATT&CK.
• Familiarity with detection engineering, threat hunting, and security automation including SOAR platforms.

Responsibilities

• Monitor and manage security tools including XDR/EDR, SIEM, vulnerability scanners, and email security.
• Coordinate with external SOC on alert triage and escalation; document alert dispositions; escalate confirmed incidents.
• Act as first responder on security incidents; perform triage, containment, evidence collection with chain-of-custody; conduct forensic analysis.
• Develop, tune, and test SIEM detection rules, correlation logic, and SOAR playbooks.
• Conduct proactive threat hunting across endpoint, network, and cloud telemetry; support purple team exercises with SOC.
• Monitor threat intel sources and turn advisories into detection signatures; prioritize vulnerabilities.
• Run vulnerability scans and track remediation; coordinate with IT on overdue items.
• Perform web app security assessments and internal pentests; coordinate external pentest engagements.
• Collect and maintain PCI-DSS evidence; perform access reviews and configuration audits; support external audits.
• Implement and maintain security controls on AWS (WAF, security groups, network ACLs); support firewall rule management.
• Support PAM operations, USB/external storage controls, endpoint compliance; advance Zero Trust initiatives.
• Lead or participate in security projects (PAM deployment, tool rollouts, compliance).
• Run security awareness training and phishing simulations; manage training platform; track completion rates.
• Handle security account provisioning and onboarding/offboarding; maintain policies and runbooks; produce security metrics.

Skills

Security operations

SIEM/XDR

Incident response

Forensic analysis

Threat hunting

SOAR/Playbooks

Vulnerability management

Cloud security

AWS IAM/Security groups

Penetration testing basics

Scripting (Python/PowerShell/Bash)

Detection engineering

Education

Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field

Tools

Nessus

Kenna

Nmap

Burp Suite

Metasploit

OWASP

Job description

Hana Cloud Solutions is seeking a security engineer to monitor and manage security tools, coordinate with an external SOC, and act as a first responder on incidents. The role focuses on detection engineering, threat hunting, and cloud security across AWS environments.

The ideal candidate has 4+ years in information security, hands-on SIEM/XDR experience, and a background in incident response and forensics. PCI-DSS and external audits experience is valued.