Job Search
Information Security Engineer Sr IRC246630
| Job: | IRC246630 |
| Location: | Mexico |
| Designation: | Senior Software Engineer |
| Experience: | 5-10 years |
| Function: | Engineering |
| Skills: | Communication Skills: Effective verbal and written communication. Problem-Solving Abilities: Quick, cyber security, Information Security, Linux/Windows, MacOS, Network Firewalls, Regular Expressions, SIEM (Security Information and Evemt Management) |
| Work Model: | Hybrid |
Description:
The customer is a healthcare IT security company. It provides healthcare companies with a platform that addresses critical compliance and security challenges and helps to improve providers’ productivity.
Requirements:
Qualifications
- 3-5 years of experience in a security engineering role, with a focus on SIEM operations and monitoring
- Experience analyzing system, network, and application logging for attack techniques at all stages of the cyber kill chain
- Strong understanding of parsing technologies and regular expression syntax
- Strong understanding of EDR, XDR and SIEM deployment, configuration, and management
- Strong understanding of APIs and integrations with APIs
- Strong knowledge with Windows, Linux, and MacOS
- Some firewall and network knowledge
- Familiarity with scripting languages and automation tools with strong knowledge of at least one.
- Experience writing technical documentation
- Solid interpersonal skills, with a focus on listening to requirements as well as solid written and spoken communication skills
- Reasonable relationship management and performance management skills
- Team player – someone who is as interested in other’s success as your own with a passion for providing world-class service.
Job Responsibilities:
Job Summary
The Security Engineer is an individual contributor, reporting to the Director of SecOps, with demonstrated technical expertise and operational skills. This role will handle daily security operations functions which include building and supporting all relevant security toolsets and processes, monitoring, responding to security-related events and alerts via endpoint protection and other security platforms, communicating and documenting findings, vulnerability management, validation, and remediation.
Duties and Responsibilities
- Develop, tune, and maintain SIEM use cases, rules, and alerts to improve threat detection and response capabilities.
- Become a tier 1 & 2 escalation resource for security-related events.
- Review requirements and assist in design, development, and maintenance of SecOps solutions and tooling.
- Participate on project teams designing advanced technologies to include management & maintenance of the enterprise.
- Contribute to documentation required for Security Operations toolsets and methodologies.
- Though not common, this job requires the ability to respond to high alerts on evenings and weekends.
- Includes participation in a paid on-call rotation.
What We Offer
Exciting Projects: Come take your place at the forefront of digital transformation! With clients across all industries and sectors, we offer an opportunity to work on market-defining products using the latest technologies.
Collaborative Environment:Expand your skills by collaborating with a diverse team of highly talented people in an open, laidback environment — or even abroad in one of our global centers or client facilities!
Work-Life Balance:GlobalLogic prioritizes work-life balance, which is why we offer flexible work schedules.We offer you the best quality of work life so that you exceed the expectations of our clients, while achieving your professional and personal ambitions.
Professional Development:Our dedicated Learning & Development team regularly organizes English classes, professional certifications, and technical and soft skill trainings. We also offer the chance to travel internationally
Excellent Benefits:We provide our employees with competitive salaries, family medical insurance, extended paternity leave, annual performance bonuses, and referral bonuses.