Information Security Engineer

Client: Autonomous Vehicle / Technology

Title: Information Security Engineer

Job Location: Foster City, CA

Duration: ~6 months

Pay Rate: $75 - $82/HR (W2 ONLY, NO C2C OR 3RD PARTIES)

The hourly pay rate is commensurate with experience and is an estimated rate provided by WorkGenius.

Work Arrangement: Onsite

About the Role

We are seeking a motivated and experienced Information Security Engineer to strengthen the organization’s security posture through automation, threat hunting, and enhanced detection capabilities.

The ideal candidate will have a strong background in Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR) platforms, along with proficiency in Python scripting. This role will focus on developing automated security workflows, improving detection capabilities, and responding to sophisticated cybersecurity threats.

Responsibilities

SIEM & SOAR Platform Management

• Maintain SIEM and SOAR platforms to support effective security threat detection and response
• Develop and fine-tune detection and correlation rules, dashboards, and reports within the SIEM
• Create, manage, and optimize SOAR playbooks to automate incident response processes and improve security operations

Automation & Scripting

• Use Python to develop custom integrations and automate repetitive security operations tasks
• Build and maintain automation workflows for threat detection, alert triage, and incident response
• Integrate security tools and threat intelligence feeds with SIEM and SOAR platforms using APIs and custom scripts

Incident Response & Threat Hunting

• Conduct proactive threat hunting to identify potential security gaps and indicators of compromise
• Analyze security alerts and data from multiple sources to identify and respond to potential security incidents

Collaboration & Documentation

• Partner with Information Security and cross-functional teams to enhance the organization’s overall security posture
• Create and maintain documentation for detection rules, automation workflows, and incident response procedures

Qualifications

• 6+ years of experience in a Security Engineering role supporting a Security Operations Center (SOC) environment or similar function
• Demonstrated experience with SOAR platforms and playbook development, such as:
• • Palo Alto Cortex XSOAR
  • Splunk SOAR
  • Tines
• Proficiency in Python for security scripting and automation
• Strong understanding of incident response, threat intelligence, and cybersecurity frameworks, including MITRE ATT&CK and NIST
• Strong analytical and problem-solving skills
• Ability to work effectively in a fast-paced environment

Bonus Qualifications

• Relevant industry certifications such as CISSP, GCIH, or similar
• Experience with cloud security across AWS, Azure, or Google Cloud Platform
• Familiarity with additional scripting languages such as PowerShell or Bash
• Knowledge of network and endpoint security solutions