Security Engineer (Remote - US)

Job Summary

The Security Engineer will be a key contributor to our cybersecurity team. They will utilize CrowdStrike’s advanced endpoint detection and response (EDR) tools to protect our organization from emerging threats. They will focus on monitoring and analyzing security data to identify potential issues and handle security incidents swiftly. The ideal candidate will have a strong grasp of cybersecurity principles and practical experience in managing security challenges and will play a crucial role in enhancing our threat detection capabilities.

All activities must be in compliance with Equal Employment Opportunity laws, HIPAA, ERISA and other regulations, as appropriate.

Essential Functions

• Security Alert Monitoring: Continuously track and analyze security alerts and incidents through tools like CrowdStrike and Zscaler, identifying potential threats in real time.
• Incident Response: Investigate security incidents, determine root causes and take immediate action to contain and resolve issues, minimizing impact.
• Proactive Threat Hunting: Conduct proactive threat-hunting activities across the network to detect signs of malicious activity, leveraging CrowdStrike’s advanced capabilities.
• Vulnerability Management: Identify and assess system vulnerabilities across networks, applications and infrastructure, coordinating with teams to ensure timely remediation.
• Security Reporting: Create detailed reports on incidents, threats, and vulnerabilities, offering actionable recommendations for enhancing security measures.
• Cross-Functional Collaboration: Partner with IT, compliance, and other security teams to develop and execute comprehensive security strategies.
• Security Awareness & Training: Support the development and delivery of security awareness programs, reinforcing cybersecurity best practices across the organization.
• Continuous Learning: Stay informed on emerging threats, tools and best practices to strengthen the organization’s security framework.
• Compliance & Standards Alignment: Ensure adherence to technical security controls and guidelines per industry standards, including HIPAA, PCI, SOC2, ISO 27001/27013, and NIST 800-53.

Minimum Requirements

• Cybersecurity Experience: 5+ years, specializing in incident response and threat detection.
• CrowdStrike Proficiency: Hands-on experience with CrowdStrike EDR platform for threat hunting, incident response and vulnerability management.
• Education & Certifications: Bachelor’s degree in computer science, Information Security, or a related field. Relevant certifications like CISSP, CEH, or CCFA are advantageous.
• Cloud Security: Familiarity with cloud platforms such as Azure and AWS.
• Security Tools: Skilled in using Zscaler, CrowdStrike, Abnormal Security, and Tenable.io, as well as broader tools like SIEM, firewalls, IDS/IPS and vulnerability scanners.
• Analytical Skills: Strong problem-solving abilities and expertise in analyzing complex data to detect threats.
• Communication: Clear and effective verbal and written communication skills, especially in translating technical information for non-technical audiences.
• Attention to Detail: Strong ability to identify anomalies that may signal security threats.

Preferred Qualifications

• Certified Ethical Hacker (CEH)
• CISSP
• Experience with other EDR platforms, SIEM tools, or network security technologies.
• Familiarity with scripting or programming languages (Python, PowerShell, etc.) for automation and threat detection tasks.
• Previous experience working in a SOC (Security Operations Center) environment.

Working Environment/Physical Demands

• Remote - Work from home
• Activities require a significant amount of work in front of a computer monitor.