Start searching
Back to Jobs
Recently postedTechnology

Security Engineer

CognowizFoster City, CA🇺🇸United States

Quick overview

SeniorityMid Senior
Work modeHybrid
LocationFoster City, CA, United States
AWSSplunkBashGoogle CloudPowerShellPythonAzure

Job description

Role Name: Security Engineer
Location: Foster City, CA - 94404
Contract Role on W2 or 1099 terms
RESPONSIBILITIES
1. SIEM & SOAR Platform Management
  • Maintain and optimize SIEM and SOAR platforms to improve threat detection and response effectiveness.
  • Develop and tune detection rules, correlation rules, dashboards, and reports to identify anomalous activity.
  • Create, manage, and enhance SOAR playbooks to automate incident response and streamline security operations.
2. Automation & Scripting
  • Utilize Python to automate repetitive security tasks and develop custom integrations.
  • Build and maintain automation workflows for alert triage, threat detection, and incident response.
  • Integrate security tools and threat intelligence feeds using APIs and custom scripts.
3. Incident Response & Threat Hunting
  • Conduct proactive threat hunting to identify security gaps and indicators of compromise.
  • Analyze alerts and security telemetry from multiple sources to investigate and respond to incidents.
4. Collaboration & Documentation
  • Partner with Information Security and cross-functional teams to strengthen overall security posture.
  • Create and maintain documentation for detection content, automation workflows, and response procedures
QUALIFICATIONS
  • 6+ years of Security Engineering experience supporting a SOC or similar security function.
  • Hands-on experience with SOAR platforms such as Palo Alto Cortex XSOAR, Splunk SOAR, Tines, or comparable solutions.
  • Proficiency in Python scripting and security automation.
  • Strong knowledge of incident response methodologies, threat intelligence, and frameworks including MITRE ATT&CK; and NIST.
  • Excellent analytical, troubleshooting, and problem-solving skills in fast-paced environments.
BONUS
  • CISSP, GCIH, or related cybersecurity certifications.
  • Experience securing cloud environments including AWS, Azure, and Google Cloud Platform.
  • Familiarity with PowerShell, Bash, or other scripting languages.

Similar jobs

Apply