Senior Security Engineer (IC) - On-site Cincinnati Ops

Ascendum Solutions; Cincinnati (OH); On-site; USD 120,000 - 180,000; Full time

Job summary

Ascendum Solutions in Cincinnati is seeking a Senior Security Engineer to lead day-to-day Security Operations, focusing on investigations and incident response. This is a senior-level individual contributor role with no direct reports, and on-site 5 days a week.

The role requires hands-on experience across endpoints, cloud, identity incidents; you'll lead containment, eradication, and recovery, develop playbooks, mentor juniors, and communicate findings to both technical and non-technical

Qualifications

• Senior-level experience in Security Operations and investigations.
• Hands-on incident response and containment/eradication.
• Experience with SIEM/SOAR, EDR, and security gateways.
• Ability to communicate complex tech to varied audiences.
• Mentor junior staff and contribute to playbooks.

Responsibilities

• Lead containment, eradication, and recovery for endpoint, cloud, identity incidents.
• Escalation point for complex security events and incidents.
• Investigate security events and determine appropriate response actions.
• Develop and improve security playbooks and runbooks.
• Provide feedback to Detection team to improve detections, enrichment, and automated response.
• Collaborate with cross-functional teams to improve logging visibility and response readiness.
• Contribute to operational maturity through playbooks, mentoring, tabletop exercises, detections, and audits.
• Mentor junior team members and help build their Security Operations capabilities.
• Communicate technical information effectively to both technical and non-technical stakeholders.

Skills

Security Operations

Incident response

SIEM/SOAR

EDR

Cloud environments

MITRE ATT&CK mapping

Communication

Mentoring

Playbooks

Tools

SIEM

Job description

Ascendum Solutions in Cincinnati is seeking a Senior Security Engineer to lead day-to-day Security Operations, focusing on investigations and incident response. This is a senior-level individual contributor role with no direct reports, and on-site 5 days a week.

The role requires hands-on experience across endpoints, cloud, identity incidents; you'll lead containment, eradication, and recovery, develop playbooks, mentor juniors, and communicate findings to both technical and non-technical