IT Security Engineer - Lead

Job Family:

IT Cyber Security

Travel Required:

Up to 10%

Clearance Required:

None

What You Will Do:

Our Security Engineer Lead plays a pivotal role within the Information Security Operations group that is dedicated to supporting Security Operations and Incident Management/Response processes, SIEM engineering, Threat Hunting, Automation, Cyber Architecture, and Threat Intelligence.  

• This position is responsible for enhancing SIEM and tool monitoring, tuning, detection, and alerting across multiple domains, to support cyber incident response capabilities and tooling, with the goal of identifying, analyzing, and mitigating security threats across the Guidehouse environment to protecting Guidehouse and Client data within systems, networks, and cloud environments. 

• You will be mentoring and working with SOC analysts to increase knowledge and skill with detection techniques and other SecOps technologies. You may also participate on IT Security projects to enhance IT Security capabilities, improve monitoring coverage, drive detection and threat hunting efforts, leading to an overall improvement of enterprise cybersecurity posture. 

• The successful candidate applies technical knowledge and experience to drive innovation and performance improvement while demonstrating critical thinking, problem solving, and sound logic when assessing problems and opportunities in generating solutions. This position reports to the IT Security Information Protection Associate Director. 

Job Function: 

• Solid understanding of platform, network, application, and cloud security fundamentals, threats, attack techniques, and mitigations 

• Knowledge of cybersecurity concepts, and network/web protocols 

• Designs and configures monitoring and alerts using SIEM, Azure Purview, Defender, CSPM, etc. 

• Experience with one or more of SIEMs, SOAR technologies, building/maintaining IR tools and processes, programming/scripting, threat hunting, SIEM detection engineering/tuning. 

• Demonstrates effective written and verbal communication skills; delivered in a professional, respectful, and timely manner 

• Produces high quality work product leveraging existing templates, tools, and methodologies that align to applicable professional standards and best practices 

• Clearly and concisely conveys more complex messages to IT Security Operations team; effectively presenting facts and recommendations 

• Identifies risk issues (e.g., technical, client service, engagement, team, internal and external) and escalate them to IT Security supervisors and senior leaders 

• Helps with issue resolution, risk mitigation and contingency planning in alignment with IT Security risk mitigation plans 

• Uses critical