Stellar IT Solutions · 4 days ago

Security Incident Automation Engineer

United States

Contract

Remote

Mid Level

2+ years exp

Wonder how qualified you are to the job?

Maximize your interview chances

Cloud Data ServicesInformation Technology

Hiring Manager

Deepak L.

Insider Connection @Stellar IT Solutions

Discover valuable connections within the company who might provide insights and potential referrals, giving your job application an inside edge.

Responsibilities

Minimum 2 years of experience in the Information Security field or relevant education.

Hands-on technical understanding of network fundamentals and common Internet protocols.

Technical understanding of the information security threat landscape.

Performing successfully in all aspects of incident response process.

Writing scripts and code in Python and PowerShell, with Java as a plus.

Strong verbal and written communication skills.

Using SEIM or logging tools to create complex queries, alerts, and dashboards.

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Network fundamentalsInternet protocolsInformation securityIncident responseScriptingPythonPowershellJavaSeimLogging toolsQueryingDashboardsCommunicationProblem-solvingCloud EnvironmentsAPIsIntrusion Detection SystemsFirewallsAntivirus SystemsProxy ServersFile Integrity MonitoringOperating System LogsEDRNetwork Security ToolsSecurity CertificationsSecurity+Ethical HackingSANS/GIACProblem SolvingAnalytical Skills

Required

Minimum 2 years of experience in the Information Security field or a relevant undergraduate or master's degree focused on Information Security/Information Assurance.

Good “hands-on” technical understanding of network fundamentals and common Internet protocols.

Technical understanding of the information security threat landscape (attack vectors and tools, best practices for securing systems and networks, etc.).

Has worked directly as a security incident automation analyst and has performed successfully in all aspects of incident response process.

Must have a demonstrated capability to write scripts and code in Python and PowerShell. Ability to write in Java would be a plus.

Must have strong verbal and written communication skills; ability to communicate effectively and clearly to both technical and non-technical staff.

Demonstrated ability to use SEIM or logging tools and the ability to create complex queries, alerts and dashboards.

Preferred

Solid knowledge of various cloud environments (AWS, Azure, etc.) and its respective API’s.

Operational experience monitoring devices such as network and host-based intrusion detection systems, web application firewalls, NextGen firewalls, antivirus systems, proxy servers, file integrity monitoring tools, and operating system logs.

Distinctive investigative, problem solving and analytical skills

Knowledge of EDR and Network security tools

Technical security certifications like Security+, Ethical Hacking or SANS/GIAC a plus.