Security Engineer

Dime Republic seeks a skilled Security Engineer with at least two years of experience to strengthen our cybersecurity defenses. This role focuses on protecting our network infrastructure and applications by identifying vulnerabilities, responding to threats, and maintaining robust security measures. The ideal candidate brings expertise in a broad range of security practices, including network security, threat detection, incident response, and cloud security. The Security Engineer works independently without managing a team but collaborates closely with various departments to ensure comprehensive protection of digital assets. The Security Engineer plays a critical role in continuously monitoring security systems, analyzing logs, and using specialized tools to detect and respond to attacks promptly. Responsibilities include conducting vulnerability assessments, penetration testing, and performing digital forensics to investigate security incidents. The engineer also handles configuration and management of security tools such as SIEM platforms and intrusion detection systems. Through vigilant analysis and timely action, this position supports the organization in maintaining compliance, minimizing risks, and fostering a secure IT environment.

Responsibilities

Monitor network and system activity to detect potential security threats and vulnerabilities.
Conduct regular vulnerability assessments and penetration tests to identify security weaknesses.
Manage and configure Security Information and Event Management (SIEM) systems including Splunk and ELK Stack for threat detection and log analysis.
Respond promptly to security incidents, performing thorough investigations and digital forensics to determine root causes and impact.
Implement and maintain network security controls such as Virtual Private Networks (VPN) and Intrusion Detection Systems (IDS).
Perform continuous threat analysis and develop automated monitoring solutions using Splunk Search Processing Language (SPL) and log data parsing techniques.
Collaborate with IT and development teams to integrate security practices within cloud services and endpoint systems.
Develop and update security policies, procedures, and documentation in line with industry best practices.
Utilize vulnerability scanning tools including Qualys Guard to identify and remediate risks proactively.
Manage identity and access controls to ensure secure system authentication and authorization.
Design and execute testing on security systems and applications to ensure robustness against emerging threats.
Leverage Splunk Add-on Development and data extraction methods including regular expressions to enhance security data ingestion and analysis.
Maintain awareness of current cyber threat landscapes and apply this knowledge to strengthen security posture continuously.