Apply on Employer Site

CARFAX · 5 hours ago

Senior Cyber Security Engineer - Security Operations Center

Centreville, VA

Full-time

Hybrid

Mid, Senior Level

4+ years exp

CARFAX is a company focused on helping consumers make informed decisions, and they are seeking a Senior Cyber Security Engineer for their Information Security team. This role involves enhancing the organization's cybersecurity posture, managing security incidents, and developing threat intelligence programs.

Automotive

Work & Life Balance

H1B Sponsor Likely

Responsibilities

Oversee and operate continuous monitoring of network traffic, systems, and applications to detect, analyze, and respond to cybersecurity threats and incidents, utilizing advanced security tools and methodologies for proactive defense

Lead the entire security incident process, including detection, triage, investigation, containment, remediation, and reporting, ensuring minimal impact on business operations and continuously improve incident response processes through automation

Conduct in-depth analysis and forensics of security incidents to determine root causes, identify compromised systems, and assess the scope of breaches, using standard practices to gather and preserve evidence for potential legal and regulatory requirements

Develop and maintain a robust threat intelligence program by collecting, analyzing, and disseminating actionable intelligence to anticipate, identify, and mitigate emerging threats, leveraging internal and external sources to enhance the organization's security posture

Proactively perform threat hunting activities using advanced analytical techniques and tools to identify and mitigate undetected threats, and potential vulnerabilities within the organization's systems

Manage and optimize the collection, storage, and analysis of security logs from various sources to ensure comprehensive visibility and timely detection of security events, implementing best practices for log retention, parsing, and aggregation to support SOC functions

Develop and deliver risk-based security reports that provide actionable insights and recommendations by analyzing security incidents, threats, and vulnerabilities, informing decision-makers of the current security posture and ensuring alignment with organizational risk management strategies

Create and maintain comprehensive security documentation, including policies, procedures, and guidelines, and support security awareness training programs to educate staff about cyber threats, safe practices, and incident response protocols, fostering a security-conscious culture

Qualification

Cyber incident responseThreat intelligence programSecurity monitoring toolsData analysis skillsSecurity documentationProgramming languagesSecurity technologiesAnalytical skillsCommunication skillsTeam collaborationProblem-solving skills

Required

Bachelor's degree in computer science, Information Technology, Cybersecurity, or a related field, or equivalent work experience in information technology

4-7 years of experience in cyber incident response within an Incident Response or Security Operations Center team

Strong understanding of security principles, practices, tools, and techniques used by cybersecurity teams

Familiarity with security technologies, tools, and frameworks (e.g., SIEM, Endpoint Detect & Response, firewalls, IDS/IPS, MITRE ATT&CK, BURP Suite, Nessus, NMAP) and knowledge of programming languages and operating systems (e.g., Python, Kali Linux)

Skilled in interpreting and analyzing data from multiple security tools and sources, including IDS alerts, firewall logs, web and application logs, and network traffic, to detect Indicators of Compromise and malicious Tactics, Techniques, and Procedures

Ability to review alerts for relevancy and urgency, provide tuning recommendations, identify and respond to sophisticated threats, and conduct risk assessments with strong analytical and problem-solving skills

Excellent written and verbal communication skills, with an emphasis on clear and concise risk-based reporting; ability to work both collaboratively in a team environment and independently; eagerness to learn and a proactive attitude towards professional development

Benefits

Competitive compensation, benefits and generous time-off policies

4-Day summer work weeks and a winter holiday break

401(k)/DCPP matching

Annual bonus program

Casual, dog-friendly, and innovative office spaces

Company

CARFAX

Glassdoor3.7

CARFAX provides vehicle history for used car buyers, sellers, and the automotive industry.

Founded in 1986

Centreville, Virginia, USA

1001-5000 employees

https://www.carfax.com/

H1B Sponsorship

CARFAX has a track record of offering H1B sponsorships. Please note that this does not guarantee sponsorship for this specific role. Below presents additional info for your reference. (Data Powered by US Department of Labor)

Distribution of Different Job Fields Receiving Sponsorship

Represents job field similar to this job

Trends of Total Sponsorships

2025 (18)

2024 (25)

2023 (11)

2022 (23)

2021 (24)

2020 (27)