Security Engineer

POSITION SUMMARY:

**Please note: Trean will not sponsor applicants for work visas.**

The Security Engineer is responsible for the day-to-day execution of the organization's cybersecurity operations program. This role serves as a hands-on member of the cybersecurity team, reviewing security alerts, investigating incidents, analyzing security events, managing security-related requests, conducting risk assessments, and identifying opportunities to strengthen security controls and processes.

The ideal candidate has experience in security operations and incident response and is seeking an opportunity to expand their skills and responsibilities across risk management, vulnerability management, security process improvement, and cybersecurity operations.

The Security Engineer must possess strong technical and analytical skills, maintain awareness of the evolving cybersecurity threat landscape, and understand modern attack techniques including ransomware, phishing, business email compromise, identity-based attacks, cloud security threats, and emerging risks associated with artificial intelligence. Success in this role requires the ability to evaluate risks, recommend practical security improvements, and contribute to the continuous evolution of the organization's cybersecurity capabilities.

RESPONSIBILITIES:

• Monitor and investigate security alerts and suspicious activity across the enterprise environment.
• Analyze suspected cybersecurity events and perform triage, containment, eradication, and recovery activities.
• Manage cybersecurity incidents through the full incident response lifecycle, including investigation, documentation, escalation, and post-incident review.
• Serve as the primary reviewer and analyst for security alerts, security-related requests, security incidents, and risk assessments, ensuring timely investigation, documentation, remediation recommendations, and follow-through.
• Review, analyze, and resolve security-related tickets, requests, and reported security concerns.
• Perform application, vendor, infrastructure, and technology risk assessments and provide recommendations to mitigate identified risks.
• Review security questionnaires, technology implementations, and proposed business or technology changes to identify security risks and control gaps.
• Assess security vulnerabilities, system misconfigurations, and control weaknesses and work with stakeholders to drive remediation efforts.
• Research emerging cyber threats, attacker tactics, techniques, and procedures (TTPs), and recommend improvements to security controls and defenses.
• Develop and maintain security procedures, response playbooks, technical documentation, and operational standards.
• Identify opportunities to improve cybersecurity processes, incident response workflows, ticket handling procedures, and operational efficiency.
• Recommend and implement enhancements to security controls, monitoring capabilities, and security processes based on lessons learned, risk assessments, and emerging threats.
• Participate in projects and technology initiatives to ensure security requirements and risks are appropriately considered.
• Support the evaluation and secure adoption of emerging technologies, including artificial intelligence solutions, within the organization.