Information Security Engineer

Required Skills: 6+ years of experience in security engineering supporting a Security Operations Center (SOC) environment or similar function Strong experience with SIEM platforms, including: Detection and correlation rule development Dashboard and report creation Alert analysis and tuning Demonstrable experience with SOAR platforms such as Palo Alto Cortex XSOAR, Splunk SOAR, or Tines Experience creating, managing, and optimizing SOAR playbooks Proficiency in Python for security automation, scripting, and custom integrations Strong understanding of incident response methodologies and threat intelligence Knowledge of cybersecurity frameworks, including MITRE ATT&CK and NIST Experience building automation workflows for threat detection, alert triage, and incident response Ability to integrate security tools and threat intelligence feeds using APIs and custom scripts Experience conducting proactive threat hunting and identifying indicators of compromise Strong analytical and problem-solving skills Ability to collaborate effectively with Information Security and cross-functional teams Strong technical documentation skills, including documenting detection rules, automation workflows, and incident response procedures Ability to work effectively in a fast-paced environment Nice to Have Skills Relevant industry certification such as CISSP, GCIH, or a similar credential Experience with cloud security and cloud environments, including AWS, Azure, or GCP Familiarity with PowerShell, Bash, or other scripting languages Knowledge of network security and endpoint security solutions Preferred Education and Experience Preferred education information was not provided. 6+ years of professional experience in Security Engineering, SOC operations, threat detection, incident response, or a related cybersecurity function is preferred. Experience maintaining security platforms and developing automated security workflows is strongly preferred.

Work arrangement: Hybrid

Location: Foster City, CA Engagement:6-month contract Work authorization arrangement: W2 only Ability to support security operations, threat hunting, automation development, and incident response activities in a collaborative environment

Start date: ASAP