Job Description
Job Summary:
The Security Engineer plays a crucial role in protecting Spring Venture Group's information assets and ensuring the integrity of our systems. This position requires a proactive and collaborative individual with a strong understanding of security principles and technologies. The ideal candidate will have 3-5 years of experience in IT or security, with a focus on SIEM, EDR, cloud security platforms, incident response, orchestration and automation, and vulnerability management. To be successful in this role, a candidate needs to be a team player who can effectively collaborate across IT teams and possess strong written and verbal communication skills.
Responsibilities:
SIEM Management:
- Monitor and analyze security events and logs from various sources using SIEM tools.
- Develop and maintain SIEM rules, alerts, and dashboards.
- Investigate and respond to security incidents identified by the SIEM.
EDR Management:
- Deploy, configure, and manage the organization's Endpoint Detection and Response (EDR) solution.
- Analyze EDR alerts and investigate potential security incidents.
- Develop and implement EDR rules and policies.
- Respond to and contain endpoint threats.
Cloud Security Platform Administration:
- Configure and maintain cloud security platforms.
- Monitor and analyze cloud application usage and security events.
- Implement and enforce cloud security policies.
Incident Response:
- Participate in incident response activities, including investigation, containment, and remediation.
- Document incident response procedures and findings.
- Contribute to the development and improvement of incident response plans.
Orchestration and Automation:
- Develop and implement security automation scripts and workflows.
- Integrate security tools and systems for streamlined operations.
- Utilize orchestration tools to automate incident response and security tasks.
Vulnerability Management:
- Conduct vulnerability scans and assessments.
- Analyze vulnerability reports and prioritize remediation efforts.
- Coordinate with IT teams to patch and remediate vulnerabilities.
- Maintain and improve the vulnerability management program.
Collaboration and Communication:
- Collaborate with IT teams to implement security controls and address security issues.
- Participate in technology support groups
- Provide security guidance and support to other departments.
- Document security procedures and maintain accurate records.
- Communicate security issues and recommendations effectively to both technical and non-technical audiences.
And all other duties as assigned.