Senior Information Security Engineer

ZipRecruiter; New York (NY); On-site; USD 80,000 - 120,000; Full time

Job summary

Join a forward-thinking company as a cybersecurity operations professional in their 24/7 Security Operations Center. This role is pivotal in managing security incidents, responding to operational tickets, and collaborating with various teams to enhance security protocols. You'll leverage your expertise in incident response and security operations to monitor alerts, conduct investigations, and streamline processes. If you have a passion for cybersecurity and a desire to contribute to a high-performing team, this opportunity is perfect for you, offering a dynamic environment where your skills will make a significant impact.

Qualifications

• 5+ years of experience in cybersecurity operations or SOC.
• Strong knowledge of SIEM platforms and endpoint protection solutions.

Responsibilities

• Manage and respond to various operational security tickets.
• Monitor and triage security alerts, initiating investigations as needed.

Skills

Cybersecurity Operations

Incident Response

SIEM Platforms

Endpoint Protection

Scripting (Python, PowerShell)

Cloud Security (AWS, Azure)

Analytical Skills

Tools

Ticketing Systems

Workflow Automation Tools

Job description

Job DescriptionJob Description

Role Overview:
We are seeking a seasoned cybersecurity operations professional to join our 24/7/365 Security Operations Center (SOC). This role involves managing and responding to a wide range of operational security tickets—such as firewall changes, access escalations, phishing reports, certificate requests, vulnerability coordination, and more. You'll also be responsible for triaging and conducting initial investigations on alerts, and collaborating closely with Tier 2 SOC and Incident Response teams to escalate, document, and analyze security events.

Key Responsibilities:

• Respond to and manage incoming security tickets, including firewall requests, phishing reports, access escalations, certificate issues, and control validation.

• Monitor and triage security alerts within the SOC, initiating investigations and escalating incidents as needed.

• Collaborate with Tier 2 SOC and Incident Response teams for escalated events, contributing to incident documentation and post-incident reviews.

• Participate in an on-call rotation, covering overnight and weekend shifts as part of a 24/7/365 SOC environment.

• Maintain and improve documentation, SOPs, and operational workflows to ensure consistent execution of security operations.

• Manage the Information Security service desk, ensuring timely triage and resolution of inbound security issues.

• Escalate complex incidents to appropriate subject matter experts and follow through to resolution.

• Support the planning and execution of tabletop exercises to strengthen incident response readiness.

• Assist in the execution of recurring security programs such as access reviews, control assessments, and compliance-related tasks.

• Identify and implement opportunities to enhance ticket handling, process efficiency, and knowledge base resources.

• Collaborate with internal stakeholders to streamline operational processes and promote automation.

• Help gather evidence and respond to audit or control-related requests in coordination with cross-functional teams.

• Contribute to the development and reporting of key operational metrics to support prioritization and performance monitoring.

Required Qualifications:

• Minimum of 5 years of experience in cybersecurity operations, SOC, or a related security function.

• Strong knowledge of SIEM platforms, endpoint protection solutions, and ticketing/workflow systems.

• Hands-on experience with security incident response, including investigation and mitigation of threats such as malware, phishing, and network intrusions.

• Familiarity with cloud security principles and environments (e.g., AWS, Azure).

• Proficiency in basic scripting or automation (e.g., Python, PowerShell, or workflow automation tools).

• Excellent analytical and problem-solving skills, with the ability to work collaboratively across Security, IT, and Compliance teams.

• A growth mindset and eagerness to learn and contribute to a high-performing security organization.
  
  #itacceljobs