Security Threat Engineer

An employer in San Diego is looking for a REMOTE Information Security Engineer to join their team. This person will be part of the Security organization. In this role, this person will be responding to escalated alerts from the SOC. This person will be expected to analyze the problem, mitigate any threats, and investigate the root of the threat to prevent the issue from reoccurring. Initially, this individual will spend 80% of their time on incident response, mitigating incoming alerts, and closing out security tickets. The other 20% of their day will be spent proactively threat hunting and actively identifying security problems before they become an issue. This person is responsible for identifying anomalies across the programs applications and operating systems. Eventually, the divide of this roles days should translate to 50/50 split between reactive and proactive tasks, and as the team progresses, the security tasks will become 20/80 split. This person will also be doing some vulnerability scans, monitoring their EDR, optimizing DLP, managing email perimeter, and helping to upkeep their SIEM Tools. This person must be collaborative and self-sufficient. This person can sit remotely and work PST hours.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com .

To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/ .

Required Skills & Experience

3+ years in a Security Operations role 5+ years in various IT Operations roles. Experience in vulnerability scanning, reporting, and incident response. Strong background in responding to phishing attempts. Experience using and administrating SIEM Tools like Splunk. Strong O365 Experience, specifically within Security Center. Experience with using and administrating EDR and AV tools. Email Gateway configuration and management. Experience with WAF tools. Experience with malware analysis.

Benefit packages for this role will start on the 31st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.