SOC Security Engineer II: Threat Detection & IR

CSX; Jacksonville (FL); On-site; USD 110,000 - 140,000; Full time

Job summary

CSX is seeking a Security Engineer II for the Security Operations Center (SOC) to monitor, detect, analyze, investigate, and respond to cybersecurity threats impacting CSX systems, networks, apps, and data. You will work with infrastructure, engineering, and business teams to protect critical railroad operations and corporate assets.

You will leverage advanced security technologies, threat intel, automation, and incident response methodologies to reduce risk and improve CSX's cybersecurity

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field.
• 3+ years of cybersecurity experience.
• 2 years in SOC/IR/SEC engineering or related security role.
• Experience investigating incidents across enterprise environments.
• Experience with Microsoft security technologies and cloud security solutions.

Responsibilities

• Monitor security alerts and events generated by SIEM, EDR, email security, cloud security, and network security platforms.
• Investigate and respond to cybersecurity incidents including malware, phishing, ransomware, unauthorized access, data loss, insider threats, and APTs.
• Develop and maintain security monitoring rules, analytics, dashboards, and alerting mechanisms.
• Develop and maintain security automation workflows and incident response playbooks.
• Participate in major incident response activities and cyber crisis management.

Skills

Security monitoring

Incident response

Threat hunting

Threat intelligence

Security automation

PowerShell/Python

MITRE ATT&CK

Windows/Linux

Education

Bachelor's degree in Cybersecurity/CS/IT/Engineering

Tools

Microsoft Sentinel

Microsoft Defender XDR/EndPoint/Office 365

Azure security services

Entra ID

Job description

CSX is seeking a Security Engineer II for the Security Operations Center (SOC) to monitor, detect, analyze, investigate, and respond to cybersecurity threats impacting CSX systems, networks, apps, and data. You will work with infrastructure, engineering, and business teams to protect critical railroad operations and corporate assets.

You will leverage advanced security technologies, threat intel, automation, and incident response methodologies to reduce risk and improve CSX's cybersecurity