I have a full time opportunity for an enterprise organization for an Principal Cybersecurity Engineer to join the team. This is a 70,000+ person organization with a lot of room for growth. It reports directly into the Monitoring & Cyber Response Manager.
This role does come with a very generous base salary + bonus
Responsibilities :
- Monitor and analyze security alerts from SIEM, EDR, and other security platforms to identify potential threats.
- Perform in-depth investigation of suspicious activity, correlating data across multiple sources to determine scope and impact.
- Lead the resolution of low to moderately complex security incidents, including containment, eradication, and recovery actions.
- Escalate confirmed incidents to L3 analysts or incident response teams with detailed documentation and recommendations.
- Support containment and remediation efforts during active incidents.
- Conduct initial root cause analysis and contribute to post-incident reviews to identify gaps and improve future response efforts.
- Leverage threat intelligence, behavioral analytics, and contextual data to enhance detection, investigation, and resolution capabilities.
- Collaborate with detection engineering teams to develop, test, and tune detection rules and use cases.
- Perform basic malware analysis, log correlation, and network traffic inspection to support incident resolution.
- Maintain up-to-date knowledge of the threat landscape, including attacker tactics, techniques, and procedures (TTPs), and apply this knowledge to improve incident handling.
- Work closely with IT, OT, and business units to validate alerts, gather context, and coordinate incident resolution efforts.
- Document investigation steps, findings, and resolution actions in a clear, structured, and timely manner.
- Participate in SOC shift rotations to ensure 24 / 7 monitoring and rapid response to security events.
- Contribute to the continuous improvement of SOC processes, playbooks, and knowledge base, with a focus on enhancing incident resolution workflows
Qualifications :
Bachelor’s degree in Cybersecurity, Information Technology, or Computer Science (completed and verified prior to start)Solid experience in a SOC or cybersecurity operationsEffective communicator with the ability to document investigations and collaborate with cross-functional teamsCertifications such as CompTIA Security+, CySA+, or GCIHProficiency in analyzing alerts from SIEM, EDR, and network monitoring toolsFamiliarity with threat intelligence, basic malware analysis, and log correlation techniquesUnderstanding of common attack vectors, threat actor behaviors, and frameworks like MITRE ATT&CKStrong analytical and problem-solving skills with attention to detailExperienced in triaging and investigating security alerts across SIEM, EDR, and network platformsSkilled in correlating data from multiple sources to identify and escalate confirmed threatsProficient in supporting incident response efforts and conducting initial root cause analysisStrong understanding of threat intelligence and its application in operational workflowsEffective communicator with the ability to document investigations clearly and collaborate across teamsCommitted to continuous learning and development in threat detection and responseAnalytical thinker with a proactive approach to identifying and mitigating risksReliable team player in a 24 / 7 SOC environment, contributing to operational excellenceLori Sklarski
Senior Technical Recruiter, PRI Technology
Lori.sklarski@pritechnology.com
Direct : (973)-354-2797
Office : 973.732.5454 x27
Cell : 973.432.9968