[Hiring] Security Operations Engineer @DMS Vision

Role Description

We are seeking a Tier 1 Security Operations Engineer for a remote contract position. The ideal candidate would have at least 5 years of overall IT experience and 3 years of Security Operations experience. The selected candidate will act as the front-line for security events triaging and will be responsible for day-to-day security operations, including incident response, triage, and monitoring. Proficiency in using Microsoft Defender Suite, EDR/XDR tools, and Sumo Logic is essential. To protect organizational assets, a strong understanding of phishing emails, email security, and threat mitigation is required.

• Security Monitoring and Triage:
  • Monitor security alerts and events using EDR/XDR tools, Microsoft Defender Suite, and Sumo Logic.
  • Analyze and prioritize security incidents to determine their urgency and impact.
• Incident Response:
  • Receive tickets and perform initial incident response, containment, and mitigation for detected security threats.
  • Escalate complex incidents to Tier 2 or Tier 3 teams as necessary.
• Email Security:
  • Analyze phishing emails and other email-based threats, providing timely response and remediation.
  • Manage and enhance email security tools to prevent and detect malicious activities.
• Vulnerability Management:
  • Conduct vulnerability assessments using Tenable and assist in remediation efforts.
  • Collaborate with IT teams to address identified vulnerabilities promptly.
• Threat Intelligence:
  • Stay updated on the latest security threats, vulnerabilities, and attack trends.
  • Provide actionable insights and recommendations to improve the security posture.
• Documentation and Reporting:
  • Maintain detailed documentation of security incidents, investigation findings, and remediation efforts.
  • Generate periodic reports on security metrics and incident trends.
• After-hours support:
  • Respond to critical security alerts after-hours as needed.

Qualifications

• 5 years of overall IT experience, with at least 3 years in a security-focused role.
• Hands-on experience with Microsoft Defender Suite, EDR/XDR solutions, and Sumo Logic (or similar).
• Strong understanding of phishing attacks and email security practices using tools like Darktrace or similar.
• Understanding of networking protocols, firewall configurations, and common attack methods.
• Experience with Tenable for vulnerability management would be a plus.