Security Engineer - Remote Eligible

Security Engineer

As a Security Engineer, you will serve as critical support for Pondurance's Endpoint Detection and Response services. You will maintain EDR platforms and improve our SOC's capabilities with our EDR, SIEM, and SOAR products. You will be a Subject Matter Expert that leverages our tech stack for our clients to detect adversaries in an ever-changing threat landscape.

Responsibilities

Support the Managed EDR Service Line:

• Assisting with installs as needed as part of a tiered support model
• Troubleshooting EDR function as needed
• Assisting clients with configuration and providing solutions
• Assist the team in handling client issues, such as responding to tickets, hosting client calls, and joining TAM calls as needed
• Scheduling and conducting proactive upgrades as needed
• Assist in continuous improvement efforts to evaluate detection and response capabilities
• Stay up to date on emerging threats and EDR capabilities, training as needed. Develop and drive methods to detect potential threats with EDR technologies

Maintain our SOAR platform by:

• Partnering and aligning with SOC and Product leadership on new capabilities
• Identifying workflow improvements and curating new automations
• Partnering internally and with our partners to ensure reliable, efficient and effective operation for our clients and SOC team
• Maintain the SOAR platform in support of day-to-day SOC activities

Work with cross-functional teams on strategic initiatives in furtherance of the mission

Build scripts and reports as necessary to support the business

Serve in the on-call rotation assisting with escalations outside of business hours

Other duties as assigned

Technologies

• Endpoint Protection Platforms: (experience with SentinelOne, Crowdstrike, Defender, etc.)
• Crowdstrike's Falcon LogScale: experience building queries, reports, and alerts
• Experience with scripting languages, such as Python and Javascript

Knowledge & Skills

• Strong understanding of tuning alerts and pertinent logs necessary to detect threats
• Understanding of cyber-attacks, threat intelligence, MITRE Att&ck framework, emerging threats and threat modeling as well as security research techniques
• Proficient understanding of modern APIs
• Prior SOC Experience and/or SOAR experience is a plus
• Ability to adjust and adapt in a fast-paced and dynamic environment, including changes in responsibilities as the business evolve
• Ability to research problems and come up with timely and reliable solutions
• Capacity for Synthesis: bring together disparate elements to create a coherent entity or a big-picture overview in order to gain a new perspective
• Critical Thinking: apply specialized and theoretical knowledge to improve efficiency
• Demonstrate strong composure and focus with a balance of urgency and intensity
• You have empathy for your clients and your teammates and work to support their needs to make them successful

If you have other combinations of relevant skills and experience that you expect to make you the right candidate for this role, please let us know.

Who We Are

At Pondurance we embrace, educate, and protect people by helping make our world a better and safer place. We believe in inviting good people into our company who are driven to become great!

Every person at Pondurance is encouraged to focus and grow in their individual areas of interest, passion, and career path. We have accessible leaders as Mentors who believe "None of us are as smart as all of us" (R. Pelletier).

We believe everyone has the freedom to be themselves, especially at work and so we embrace, support, and celebrate each other. Each one of us influences our company's direction through speaking up, you have a voice and we want you to use it.

Do you want to be a part of something different? Do you want to influence real change? Do you want to be part of the solution? Then join us in redefining the security and cyber risk landscape.

What We Offer

The opportunity to apply your expertise, take on new challenges, and help customers address their biggest security objectives.

An inclusive culture of teamwork that embraces the diversity of our people and communities in which we work.

Some of the corporate benefits (there are more) for full-time employees include: Medical, dental, vision, disability, FSA, HSA, life and AD&D insurance, 401(k) Plan. Time off: PTO, sick, holiday, & parental leave details are available. Money: We provide competitive compensation packages based on the market and your overall credentials.

Although this is a remote role, if you live close by, you'll have access to our office locations: McLean, VA or Indianapolis, IN.

To promote a healthy and safe work community we require background and drug screenings as part of our hiring process. Details of our process will be provided upon request.

We are an equal opportunity employer focused on celebrating diversity and inclusion. We believe that each individual should be treated equally without regard to race, color, identity, national origin, protected veteran status, religion, sex including sexual orientation and gender identity, disability, or any other characteristic protected by law.

Schedule: Available during standard business hours including being available for meetings and collaboration. Flexibility to participate in our rotating, overnight on-call schedule.