Security Operations Engineer

Built on meritocracy, our unique company culture rewards self-starters and those who are committed to doing what is best for our customers.

Brown & Brown is seeking a Security Operations Engineer to join our growing team. 

The Security Operations Engineer will develop, implement and enhance a variety of security controls and tools to help defend the organization against cybersecurity threats. You will help identify cybersecurity risks in the environment and provide solutions for mitigation. You will work with different parts of the organization to help close security gaps. The ideal candidate will have 3-5+ years of security operations experience, with 3+ of those years being cybersecurity engineering experience.  

How You Will Contribute: 

• Provide hands on technical expertise across various security technologies including Endpoint Detection & Response (EDR) tools, Intrusion Detection/Prevention Systems (IDS/IPS), Anti-phishing tools, Data Loss Prevention (DLP) tools, and XDR/SIEM infrastructure 

• Configure, troubleshoot, and test detection, prevention and response tools to improve performance 

• Create and update security tool detection rules to detect suspicious activity across endpoints, networks, and users 

• Create and update data loss prevention and detection rules and policies to properly classify and protect sensitive data or identify suspicious behaviors 

• Validate security controls are set up properly in the environment and provide resolution guidance where controls are not meeting standards 

• Review, improve and maintain security logging to XDR/SIEM, based on needs of the cybersecurity program 

• As part of the Incident Response process, serve as the subject matter expert to answer technical questions around security incidents and ensure all security incidents are tracked and remediated properly 

• Work cross functionally with various teams to provide security expertise in areas of Security Automation and Response platforms, SaaS, IaaS, PaaS and cloud environments 

• Maintain an understanding of emerging security threats and advanced threat actor capabilities 

• Integrate threat intelligence feeds and sources with organization’s security monitoring infrastructure 

• Select, develop, and manage the implementation of systems, tools, and processes that will keep the organization at the leading edge of security while proactively mitigating risks to the organization 

• Provide technical support to information security projects by researching, documenting, and implementing security solutions 

• Assist in risk assessment and action planning to increase the security posture of the organization 

• Update security documentation in accordance with organization’s cybersecurity policies and procedures 

Licenses and Certifications:  

• At least one active security certification preferred: GCIH, GCIA, CISSP, CEH or related 

Skills & Experience to Be Successful: 
 

• B.S. in Information Security, Computer Science, Computer Engineering or similar technical program or equivalent experience 

• 3-5+ years in a hands-on technical role in information security supporting a large organization