ProCircular

Security Operations

• Lead incident response engagements to scope work, perform forensic investigations, contain security incidents, and provide guidance on remediation.
• Serve as the Tier III escalation point for alerts and trouble tickets escalated by Tier I and Tier II analysts that signal an incident requiring advanced review.
• Own the most complex and critical security investigations through to resolution, determining relevancy, urgency, and root cause of escalated alerts and incidents.
• Conduct host forensics, network forensics, log analysis, and malware triage to support incident response investigations.
• Collect and analyze asset data (configurations, running processes, memory, etc.) from affected systems to drive investigation and containment.
• Act as senior first responder to security event escalations via email, phone, and ticket.
• Direct and support Tier I and Tier II analysts in the remediation of critical information security incidents.
• Review and provide quality assurance on trouble tickets and investigative work produced by other team members.
• Monitor advanced security alerts and incidents within established customer Service Level Agreements.
• Craft new detection content and use cases based on threat intelligence, analyst feedback, available log data, and previous incidents.
• Tune rules, filters, and policies for detection-related security technologies to improve accuracy and visibility.
• Build parsers and field extractions to facilitate reliable content development within security data lake architectures.
• Build, implement, and maintain scripts and tools that contribute to ProCircular's security operations and incident response methodologies.
• Design, develop, and maintain security orchestration and automation workflows using industry-leading SOAR platforms.
• Manage, monitor, and maintain assigned security platforms while following and improving established procedures.
• Prepare detailed and accurate reports from analysis outcomes, and write documentation for tasks, procedures, and knowledgebase articles that support the understanding and efficiency of SOC services.
• Mentor junior engineers and analysts, and practice continual self-improvement through education, training, and certification.
• Communicate positively with clients, determine client needs, obtain clarification as required, and escalate issues and messages accordingly.
• Complete assigned projects on time and with excellent quality.

Security Operations Engineer – Incident Response