Security Operations Engineer — Hybrid Incident Response

Talentify; Wayzata (MN); Hybrid; USD 90,000 - 130,000; Full time

Job summary

Trean Corporation is seeking a Security Engineer to lead day-to-day cybersecurity operations, investigate incidents, and drive risk assessments. You will review security events, manage incident response, and ensure remediation across the enterprise.

The ideal candidate has hands-on security operations experience, strong analytical skills, and the ability to evolve security controls in a hybrid-work environment with minimum three onsite days weekly.

Qualifications

• Experience in day-to-day security operations activities, including alert triage, incident investigation, ticket review, remediation tracking.
• Experience participating in cybersecurity incident response activities, including investigation, containment, recovery, and documentation.
• Experience conducting risk assessments for technology, applications, vendors, or cybersecurity.
• Ability to identify security vulnerabilities, control weaknesses, and remediation recommendations.
• Knowledge of current cybersecurity threats, attack techniques, defensive security principles, and best practices.
• Understanding of IAM, endpoint security, vulnerability management, security monitoring, and incident response.

Responsibilities

• Monitor and investigate security alerts and suspicious activity across the enterprise environment.
• Analyze suspected cybersecurity events and perform triage, containment, eradication, and recovery activities.
• Manage cybersecurity incidents through the full incident response lifecycle, including investigation, documentation, escalation, and post-incident review.
• Serve as the primary reviewer and analyst for security alerts, security-related requests, security incidents, and risk assessments, ensuring timely investigation and remediation.
• Review, analyze, and resolve security-related tickets, requests, and reported security concerns.
• Perform risk assessments and provide recommendations to mitigate identified risks.
• Review security questionnaires, technology implementations, and proposed changes to identify security risks and control gaps.
• Assess vulnerabilities, misconfigurations, and control weaknesses and drive remediation with stakeholders.
• Research emerging cyber threats and TTPs, and recommend improvements to controls.
• Develop and maintain security procedures, playbooks, and technical documentation.
• Identify opportunities to improve security processes and incident response workflows.
• Recommend enhancements to security controls and monitoring based on risk and threats.
• Participate in projects to ensure security requirements are considered.
• Support secure adoption of emerging technologies, including AI, within the organization.

Skills

Security operations

Incident response

Risk assessments

Vulnerability management

Threat analysis

Analytical thinking

Education

Bachelor's degree in Cybersecurity, Information Technology, Computer Science

Job description

Trean Corporation is seeking a Security Engineer to lead day-to-day cybersecurity operations, investigate incidents, and drive risk assessments. You will review security events, manage incident response, and ensure remediation across the enterprise.

The ideal candidate has hands-on security operations experience, strong analytical skills, and the ability to evolve security controls in a hybrid-work environment with minimum three onsite days weekly.