Job Description

GlobalSource IT has an international client handling premier legal support to companies worldwide in a variety of industries.

They are looking for a Remote/Hybrid Onsite Senior Cybersecurity Engineer to ensure the health and operational effectiveness of their security systems and to enhance their information security program. You will manage incident response functions, troubleshoot security events, and communicate status updates to leadership. **Candidates may reside in MN, UT, CO, or AZ.**

What you'll do:

• Deploy tailored information security solutions to protect core business functions.
• Microsoft Sentinel logging, Cloud security, security control
• Maintain and optimize Information Security tools, including SIEM systems, IDS/IPS, CASB, and related technologies.
• Implement and monitor security tools, ensuring completeness and effectiveness of security measures. - Handle Data Loss Prevention activities
• Create SIEM detections based on the MITRE ATT&CK framework and recommend improvements.
• Oversee the development and execution of security monitoring processes and incident response plans. - Cloud-based workloads, security logging, automation
• Automate tasks within the SOAR environment to enhance operational efficiency.
• Participate in typical on-call rotation for security issue escalation.

What you'll need:

• High School diploma or G.E.D. with some post-secondary coursework or equivalent experience.
• Minimum 5 years in information security/SOC or 3-5 years in IT administration with a security focus.
• Senior-level understanding of Microsoft Sentinel
• Proficiency in creating detections using the MITRE ATT&CK framework.
• In-depth expertise with SIEM, IDS/IPS, and other security tools.
• Knowledgeable in computing environments: Windows, OSX, Linux, Unix.

Required Technical Skills:

• 2+ years of experience with Microsoft Sentinel or similar SIEM.
• 2 years of experience with Microsoft Defender for Endpoint/Server or similar EDR.
• 2 years of experience with Microsoft CASB or similar.
• 2 years of experience with Identity and Access Management tools (Microsoft EntraID, Active Directory).
• Infrastructure/network background to drive solutions
• Advanced skills in Windows and Linux operating systems.
• Proficient in scripting languages (PowerShell, Python) and KQL.

Preferred:

• Bachelor’s degree.
• Familiarity with ISO 27001:2022 compliance.
• Relevant certifications (SANS GSEC, GCIA, CISSP, CCSP).

What they offer:

• Base salary + Full Benefits + 401K + hybrid remote (1x/month onsite in Minneapolis)

If you're looking for an opportunity to deploy & monitor security solutions with an international firm and drive operational effectiveness, we should talk! Apply now or email me for details.

Job Tags

Similar Jobs