Security Operations Engineer II (SIEM/IR)

IDEMIA Public Security; United States; On-site; USD 90,000 - 140,000; Full time

Job summary

IDEMIA Public Security is seeking a security operations professional to analyze security event data, triage incidents, and coordinate responsive actions across internal teams and external partners. You will develop incident response playbooks and contribute to threat detection efforts using SIEM/EDR tools.

The role requires hands-on incident response experience, familiarity with MITRE ATT&CK, and relevant certifications.

Qualifications

• Bachelor’s degree in computer science, information technology, cybersecurity, or related field (or equivalent experience).
• 3+ years of experience in security operations or cybersecurity roles.
• 2+ years hands-on with SIEM and EDR technologies.
• Fundamental understanding of SIEM technologies, log management, and security analytics.
• Hands-on incident response experience.
• Experience with scripting languages such as Python, PowerShell, or Bash.
• Familiarity with MITRE ATT&CK framework and threat intelligence concepts.
• Security certifications such as Splunk Power User/Admin, CISSP, CEH, or Security+.

Responsibilities

• Analyze security event data to identify potential threats and vulnerabilities.
• Triage, investigate, and respond to alerts and security incidents, coordinating with internal teams and external stakeholders.
• Develop and implement incident response plans, playbooks, and procedures.
• Contribute to detection efforts by assisting in the creation of requests for new detections and tuning detections.
• Assist the Incident Response Lead in coordinating with the company’s Managed Security Service Provider and additional Incident Response forensics resources as appropriate.
• Continuously monitor Splunk for security events, respond and resolve security incidents, create new alerts and suppressions.
• Create Splunk searches to identify the latest threats and risks to the organization, threat hunting.
• Utilize EDR tools to investigate incidents and monitor malicious activity.
• Maintain security awareness by researching current threats and vulnerabilities and escalating any risks for remediation.
• Support compliance initiatives by generating reports and audits using Cybersecurity tools.

Skills

Security operations

Incident response

Analytical skills

Communication

Team collaboration

Scripting (Python/PowerShell)

Education

Bachelor’s degree in CS/IT/Cybersecurity

Equivalent experience

Tools

SIEM

EDR tools

Splunk

MITRE ATT&CK

Job description

IDEMIA Public Security is seeking a security operations professional to analyze security event data, triage incidents, and coordinate responsive actions across internal teams and external partners. You will develop incident response playbooks and contribute to threat detection efforts using SIEM/EDR tools.

The role requires hands-on incident response experience, familiarity with MITRE ATT&CK, and relevant certifications.