• Security Engineer - Threat Defense

    Insight Global (Cary, NC)


    Job Description

    Network Engineering support monitoring operations and response to cybersecurity, email threats.

     

    Use expertise in information security, SIEM, and cyber detection development to enhance client security posture.

     

    Build cybersecurity threat detections in Splunk.

     

    Modify existing detections to reduce false positives and improve accuracy.

     

    Drive initiatives with IT, Application, InfoSec teams to continuously improve security visibility.

     

    Participate in sprint planning and backlog management for continuous development.

     

    Maintain accurate and up-to-date documentation, workflows, and processes.

     

    We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to [email protected] learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

     

    Skills and Requirements

     

    5+ years of experience as a network engineer

     

    Detection Engineer, Security Engineer, or Threat Intelligence Analyst or adjacent IT field.

     

    Demonstrated ability to build and interpret Splunk Processing Language (SPL).

     

    Understanding of Incident Response frameworks and root cause analysis.

    Worked with enterprise customers directly for support and troubleshooting

    Bachelor’s degree in computer science, information security, or related field or equivalent work experience. Mimecast or Proofpoint