Sr. Information Security Engineer

Essential Functions:

• Configures, maintains, and optimizes assigned security platforms across endpoint, network, web, email, cloud, and identity domains.
• Continuously refines policies, detection logic, and configurations to improve signal quality, reduce false positives, and enhance visibility.
• Applies platform capabilities to develop and improve detection coverage (e.g., IOA, behavioral detection).
• Ensures platform health, telemetry integrity, and effective coverage across environments
• Evaluates and implements enhancements to improve effectiveness of existing tools prior to recommending new solutions.
• Analyzes alerts and raw telemetry generated by security platforms and determines appropriate action based on context and risk.
• Investigates suspicious activity using available data sources, including logs, network traffic, and endpoint behavior.
• Applies independent judgment to distinguish between benign, anomalous, and malicious activity.
• Perform triage and root cause analysis, escalating when broader coordination is required.
• Contributes to incident response through multi-platform analysis and insight.
• Troubleshoots and resolves issues related to security controls, including access disruptions, false positives, and policy conflicts.
• Applies practical, risk-based decisions when adjusting controls to balance security with operational needs.
• Collaborates with IT, engineering, and business teams to diagnose and resolve issues efficiently
• Develops working knowledge across multiple security domains to support team resiliency and continuity coverage.
• Serves as a secondary resource across security platforms including endpoint, email, vulnerability, and cloud.
• Collaborates with peers to ensure continuity of coverage and reduce single points of failure
• Identifies gaps in detection, visibility, and control effectiveness based on operational experience.
• Improves detection quality, reduces noise, and enhances response effectiveness (e.g. MTTD/MTTR).
• Contributes to development of playbooks and processes, remaining effective in situations where such guidance is incomplete.
• Implements automation or scripting where appropriate to improve efficiency.
• Communicates findings, risks, and recommendations clearly to technical and non-technical stakeholders
• Translates technical observations into business-relevant impact.
• Demonstrates strong active listening and incorporates differing perspectives.
• Maintain a collaborative, solutions-oriented approach while providing clear recommendations and direction.
• Participate in on-call rotation for after-hours response.
• Respond to security incidents and production-impacting issues in a timely and structured manner.
• Communicates important security developments, escalations, and activities to appropriate management personnel.
• Serves as a mentor and provides training to other team members.
• Recommends regulatory and industry best practice framework for security operational.
• Conducts industry research on new and emerging security technologies to ensure security solutions exhibits high levels of performance.
• Collaborates with other departments to ensure security is embedded throughout organizational processes.
• Participates in technical audits to ensure compliance with security policies and other industry standards.
• Participates in the creation and maintenance of security documents.
• Performs other related duties and projects as business needs require at direction of management.

Education and Experience:

• Bachelor's degree in Computer Science, Computer Engineering, Information Technology, or related field.
• Minimum eight (8) years of experience in information security network security, infrastructure security or any equivalent education and/or experience from which comparable knowledge, skills and abilities have been demonstrated/achieved.
• Experience in zScaler or Darktrace preferred
• Experience with security platforms such as the following, required:

• • Network detection and response (NDR)
  • Secure web gateway / SSE platforms
  • Endpoint, cloud, or identity security tools

Pay Range: $145,000.00 - $173,000.00/yr