Senior Security Engineer - Threat Management and Response

Be part of an amazing story. 

Macy’s is more than just a store. We’re a story. One that’s captured the hearts and minds of America for more than 160 years. A story about innovations and traditions…about inspiring stores and irresistible products…about the excitement of the Macy’s 4th of July Fireworks, and the wonder of the Thanksgiving Day Parade. We’ve been part of memorable moments and milestones for countless customers and colleagues. Those stories are part of what makes this such a special place to work. 

Job Overview

The Senior, Security Incident Response Engineer will monitor and investigate normal and escalated security events to determine risk and exposure and perform additional forensics investigations to understand impact and mitigation. This position will mentor more junior level Analysts as a technical leader and work closely with them to manage & resolve multiple incidents simultaneously and prioritize based on risks.  This position will be required to have good written and oral communication skills to present the results of the technical analysis and research of each incident or investigation.

The Senior, Security Incident Response Engineer should have experience and understanding of multiple security platforms and layers including Anti-virus, Firewalls, Proxy servers, Intrusion Prevention Systems, Logging Correlation/management, Operating systems, Protocols and Incident Response.  Perform other duties as assigned.

What You Will Do

• Responds to escalated security events or incidents and implements counter-measures to reduce and/or mitigate further exposure. The Analyst performs triage on events which are reported by various detection devices to filter out things such as false positives and known accepted activities.
• Leads and manages security investigations from discovery to resolution and works as an incident response manager for each security incident.
• Creates reports to display trends and overall statistics based on correlated security incidents and event data to produce monthly exception and management reports.
• Responsible for mentoring, training and support of level 1 Analysts.
• The Analyst II, Information Security Response provides 24x7 monitoring of security detection devices in order to detect potential attacks as they occur and to provide information to on previous malicious network attacks.
• Creates and implements standard operating procedures and processes to help streamline investigations, daily monitoring and analysis research to ensure all analysts are effective and following the same guidelines.
• Consistently demonstrates regular, dependable attendance and punctuality. 
• Collaborate with Ecommerce Support teams to understand their requirements and provide necessary support.
• Partner with Security Architecture and Ecommerce Support teams to identify solutions and propose implementation plans.
• Assist in maintaining and upgrading security solutions that protect enterprise systems, applications, and data by adhering to established policies, practices, and change management processes.
• Work with managers, project managers, architects, and technical leads to allocate resources and facilitate clear communication across all involved teams.
• Help clients identify and evaluate security gaps, translating findings into functional specifications with a focus on infrastructure and business applications.
• Collaborate with technical leads in Networking, Servers, Applications, Field Services, Project Management, Data Center Operations, and subject matter specialists to integrate security controls into a unified architecture that effectively mitigates company risks.
• Apply critical thinking skills to analyze and address complex security challenges.
• Coordinate closely with managed service providers, delivery teams, and vulnerability and incident response teams.
• Demonstrate consistent, reliable attendance and punctuality.
• Foster an environment of acceptance and respect that strengthens relationships, and ensures authentic connections with colleagues, customers, and communities. 
• In addition to the essential duties mentioned above, other duties may be assigned.

Skills You Will Need

• Proficient in security platforms, including firewalls, intrusion prevention systems, testing tools, log management, operating systems, and risk assessments.
• Understanding of Incident response methodologies and assist with coordinating security incidents.
• Resolves high impact and/or complex, chronic or cross-functional problems.
• Ability to explain technical concepts to technical or non-technical personnel.
• Ability to identify common network and web site attacks such as SQ