Information Security Engineer II at IDEMIA

Job description

IDEMIA Public Security, a division of IDEMIA Group, is the leading provider of secure and trusted biometric-based solutions, transforming public and private organizations across the globe. Our industry-enabled and client-specific solutions draw upon decades of expertise in biometrics to revolutionize the fields of public security, justice and public safety, travel and transport, identity, and access control. Built on privacy and trust, our market-leading iris, fingerprint and facial recognition solutions top independent benchmarking for accuracy, fairness and scalability. These exacting standards enable our clients to build safer, fairer societies where people can live, interact, and move about freely. With 4000+ employees around the world and 150+ partners worldwide, we offer more than just a job - we provide a dynamic environment where innovation thrives, opportunities abound, and your talents are valued. Be part of a global leader shaping the future of biometric based technology. Learn more here . • Analyze security event data to identify potential threats and vulnerabilities. • Triage, investigate, and respond to alerts and security incidents, coordinating with internal teams and external stakeholders. • Develop and implement incident response plans, playbooks, and procedures. • Contribute to detection efforts by assisting in the creation of requests for new detections as well as tuning detections. • Assist the Incident Response Lead in coordinating with the company’s Managed Security Service Provider and additional Incident Response forensics resources, as appropriate. • Continuously monitor Splunk for security events, respond and resolve security incidents, create new alerts and suppressions. • Create Splunk searches to identify the latest threats and risks to the organization, threat hunting. • Utilize additional security tools, i.e., Endpoint Detection Response (EDR) tools to investigate incidents and monitor malicious activity. • Maintain security awareness by researching current threats and vulnerability and escalating any associated risks for remediation. • Support compliance initiatives by generating reports and audits using Cybersecurity tools. • Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related field (or equivalent experience). • 3+ years of experience in security operations or cybersecurity roles. • 2+ years of hands-on experience with SIEM and EDR technologies • Fundamental understanding of SIEM technologies, log management, and security analytics. • Hands-on experience conducting incident response investigations and related activities. • Experience with scripting languages such as Python, PowerShell, or Bash is a plus. • Familiarity with MITRE ATT&CK framework and threat intelligence concepts. • Security certifications such as Splunk Certified Power User, Splunk Certified Admin, CISSP, CEH, or Security+ are a plus. • Ability to work independently and collaboratively in a fast-paced environment. • Excellent problem-solving, communication, and analytical skills. Note to third-party recruiters: IDEMIA Public Security does not work with third-party recruiters absent a signed agreement and will treat any resumes submitted without a signed agreement as the property of IDEMIA Public Security. In the event that IDEMIA Public Security hires a candidate who was brought to our attention by a recruiter who does not have a signed agreement, IDEMIA Public Security will not pay any fees to the recruiter as a result of the hire.

Requirements

Must-haves

Analyze security event data to identify potential threats and vulnerabilities.
Triage, investigate, and respond to alerts and security incidents, coordinating with internal teams and external stakeholders.
Develop and implement incident response plans, playbooks, and procedures.
Contribute to detection efforts by assisting in the creation of requests for new detections as well as tuning detections.
Assist the Incident Response Lead in coordinating with the company’s Managed Security Service Provider and additional Incident Response forensics resources, as appropriate.
Continuously monitor Splunk for security events, respond and resolve security incidents, create new alerts and suppressions.
Create Splunk searches to identify the latest threats and risks to the organization, threat hunting.
Utilize additional security tools, i.e., Endpoint Detection Response (EDR) tools to investigate incidents and monitor malicious activity.
Maintain security awareness by researching current threats and vulnerability and escalating any associated risks for remediation.
Support compliance initiatives by generating reports and audits using Cybersecurity tools.
Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related field (or equivalent experience).
3+ years of experience in security operations or cybersecurity roles.
2+ years of hands-on experience with SIEM and EDR technologies
Fundamental understanding of SIEM technologies, log management, and security analytics.
Hands-on experience conducting incident response investigations and related activities.
Familiarity with MITRE ATT&CK framework and threat intelligence concepts.
Ability to work independently and collaboratively in a fast-paced environment.
Excellent problem-solving, communication, and analytical skills.

Nice-to-haves

Experience with scripting languages such as Python, PowerShell, or Bash is a plus.
Security certifications such as Splunk Certified Power User, Splunk Certified Admin, CISSP, CEH, or Security+ are a plus.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

python

Platform: icims
Effort: medium

Benefits

Benefits detected in the listing.

Vision