CyberSecurity Engineer

• Provide technical guidance and recommendations to clients to enhance their overall security posture within managed products
• Handle daily proactive maintenance and reactive troubleshooting/repair functions
• Proactively monitor technical issues pertaining to client services and recommend ways to reduce future risk and impact
• Monitor the health of security systems
• Utilize SIEM and other tools for network investigations, including firewalls, IDS/IPS, and network and system monitoring toolsets
• Perform post-mortem analysis on logs, traffic flows, and other activities to identify malicious activity
• Research, develop, and stay current on testing tools, techniques, and process improvements supporting security tools and incident response
• Work proactively with clients on technical issue management, planning, implementation, and skills and knowledge transfer for provided services
• Provide technical support to managed service customers worldwide using Microsoft XDR, Sentinel, SentinelOne, Azure, and AWS

• 3+ years experience in an Engineering or similar role in Cyber Security
• Experience with security tool application, server, and networking support
• Experience troubleshooting performance and application-based issues on Windows and Linux environments
• Some automation or scripting experience with Regex and PowerShell
• Experience with Kusto Query Language (KQL)
• Experience with Prometheus and Grafana
• Microsoft Certifications (AZ500,MS500, SC200, SC100) preferred
• Exposure to MITRE and familiar with TTPs (Tactics Techniques and Procedures)
• Ability to create internal documentation including architectural diagrams
• Familiarity with cloud administration best practices and principles in AWS and/or Azure
• In-depth understanding of networking concepts and technologies
• Experience using enterprise ticketing systems such as ServiceNow
• Excellent problem solving and communication skills
• Ability to provide step by step technical help via phone, remote session, and email