Security Operations Engineer – SIEM & IR (Hybrid)

Trintech; United States; Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

Open PTO

Hybrid schedule

Healthcare program

Volunteer time

401k with company match

Pet Insurance

Tuition reimbursement

Job summary

Trintech is seeking a Security Operations professional to triage, analyze, and investigate alerts from SIEM, EDR, and DLP across endpoints, servers, and networks. You will assess vulnerabilities, support incident response, and help implement remediation with stakeholders.

In this role, you will run phishing assessments, coordinate with service providers, contribute to the SOC KB, and help shape the Information Security Roadmap while collaborating with other departments on RFPs and security

Qualifications

• Ability to accurately assess and triage potential security threats.
• Advanced knowledge of cyber-attacks, threat vectors, risk management, and incident management.
• Foundational knowledge of Windows, Linux, Unix, and MacOS.
• Foundational knowledge of TCP/IP, network analysis, and security applications.
• Ability to prioritize tasks and communicate effectively throughout the process.
• Advanced interpersonal skills to promote ideas and collaborate across teams.
• Capable of articulating cybersecurity policies, processes, and controls.
• Positive attitude and strong work ethic with a desire to contribute to the team's success.

Responsibilities

• Triage, analyze, and investigate security alerts from SIEM, EDR, DLP, and others.
• Analyze and report vulnerabilities identified by scanning tools with remediation context.
• Participate in the IR process by collecting and analyzing evidence from endpoints, servers, and networks.
• Assist with deployment, operation, and maintenance of security technologies including SIEM, EDR, DLP, and others.
• Create and manage internal phishing assessments to promote security awareness across Trintech employees.
• Serve as a secondary point of contact with Trintech security providers and vendors.
• Contribute to the Security Operations KB library by documenting processes and workflows.
• Participate and support Information Security Roadmap planning.
• Collaborate with SOC to identify and implement tuning opportunities for alert use-cases.
• Respond to ad-hoc security questions from employees.
• Communicate with other departments to assist in customer RFPs and security questionnaires.
• Serve as the lead facilitator of Trintech’s Information Security Internship program.

Skills

Threat triage & analysis

Cybersecurity concepts

OS knowledge (Windows/Linux/Unix/MacOS

TCP/IP & network analysis

Security policies & controls

Communication across teams

Incident management

Task prioritization

Education

Master’s Degree in IT / Cybersecurity

2–4 years information security / risk / audit

Industry certifications (SEC+, CISSP, etc.)

Job description

Trintech is seeking a Security Operations professional to triage, analyze, and investigate alerts from SIEM, EDR, and DLP across endpoints, servers, and networks. You will assess vulnerabilities, support incident response, and help implement remediation with stakeholders.

In this role, you will run phishing assessments, coordinate with service providers, contribute to the SOC KB, and help shape the Information Security Roadmap while collaborating with other departments on RFPs and security