LI
Senior Security Engineer / Incident Response
Leadstack Inc
Location not stated
Senior
4 weeks ago
- Incident Response
- SIEM
- EDR
- Azure
- GCP
- AWS
4 weeks ago
Job Title:Senior Security Engineer / Incident Response
Duration:12+ Months (Contract to Hire)
Location:Blue Ash, OH –Onsite
PayRate: $70-80/hr on w2
Job Description:
To Vendors
- This is a 12+ month contract to hire opportunity, supporting Corporate Information Security.
- Candidates will be required to be on-site 5 days/week.
- This is a senior-level individual contributor role with no direct reports.
- Candidates should have directly relevant Security Operations and investigation experience. Lack of relevant hands-on experience will be a disqualifier.
- Pre-screen consists of 5 unique questions specific to the role
Job Description
The Senior Security Engineer will support day-to-day Security Operations, with a focus on investigating security events and responding to complex security incidents. This person will lead containment, eradication, and recovery efforts across endpoint, cloud, and identity-related incidents and serve as an escalation point for more complex security events.
This is a senior-level individual contributor role requiring strong Security Operations experience, critical thinking, attention to detail, and the ability to communicate effectively in high-pressure situations. The ideal candidate will be able to break down complex technical information and communicate clearly with both technical and non-technical stakeholders.
Requirements:
· Strong experience in Security Operations, security investigations, and incident response
· Hands-on experience investigating and responding to security events and incidents
· Experience supporting containment, eradication, and recovery activities
· Experience with security alerts and detections
· Experience developing or maintaining security playbooks and/or runbooks
· Understanding of Security Operations tooling such as SIEM/SOAR, EDR, email security gateways, and firewalls
· Strong critical-thinking and problem-solving skills
· Ability to break down complex technical topics and communicate them clearly to technical and non-technical audiences
· Strong written and verbal communication skills
· Demonstrated leadership within an individual contributor role
· Experience mentoring junior team members
Nice-to-Haves:
· Experience with detection engineering
· Experience with rule or alert tuning
· Familiarity with the MITRE ATT&CK framework, including mapping security activity or detections to relevant tactics and techniques
· Experience with cloud environments such as Azure, GCP, or AWS
· Familiarity with Google Security Operations
· Experience contributing to tabletop exercises or security audits
Key Responsibilities
· Lead containment, eradication, and recovery efforts for endpoint, cloud, identity, and other security incidents
· Serve as an escalation point for complex security events and incidents
· Investigate security events and determine appropriate response actions
· Contribute to the development and improvement of security playbooks and runbooks
· Provide feedback to the Detection team to improve the quality of detections, enrichment, and automated response
· Collaborate with cross-functional teams to improve logging visibility and response readiness
· Contribute to operational maturity through playbooks, mentoring, tabletop exercises, detections, and audits
· Mentor junior team members and help build their Security Operations capabilities
· Communicate technical information effectively to both technical and non-technical stakeholders
To know more about current opportunities at LeadStack, please visit us at https://leadstackinc.com/careers/
Should you have any questions, feel free to call me on or send an email.
Senior Security Engineer / Incident Response · Leadstack Inc