Security Engineer II - 173472

Responsibilities: for the Engineer II - Cyber Incident Response include: Investigating and responding to cybersecurity incidents such as phishing, malware, ransomware, and unauthorized access attempts Performing in-depth analysis of logs, alerts, and forensic data to determine incident scope, root cause, and impact Escalating high-severity or complex incidents to senior engineering staff with clear documentation and supporting evidence Assisting with containment, eradication, and recovery efforts during active incident response activities Contributing to the development and improvement of SOC playbooks, runbooks, and standard operating procedures Required Qualifications for the Engineer II - Cyber Incident Response include: 2-5 years of experience in cybersecurity, with at least 2 years in SOC operations or incident response Hands-on experience with SIEM, EDR, and forensic tools such as Splunk, CrowdStrike, and Wireshark Strong understanding of incident response methodologies, log analysis, and adversary tactics, including familiarity with NIST, MITRE ATT&CK, and ISO 27035 Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or equivalent professional experience Qualifications: for the Engineer II - Cyber Incident Response include: 2-5 years of experience in cybersecurity, with at least 2 years in SOC operations or incident response Hands-on experience with SIEM, EDR, and forensic tools such as Splunk, CrowdStrike, and Wireshark Strong understanding of incident response methodologies, log analysis, and adversary tactics, including familiarity with NIST, MITRE ATT&CK, and ISO 27035 Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or equivalent professional experience