Security Engineer, Veeva

• 4+ years experience performing engineering duties in the cybersecurity context, or equivalent
• Significant experience in setting up and maintaining AWS infrastructure
• Significant experience in automation languages in the context of incident response and pulling evidence from systems
• Strong communication skills with tactical personnel and senior-level leadership
• Extensive skills in developing, tuning, and crafting specific behavioral alerts that are tailored to unique and relevant cyber threats
• Extensive background in the incident response life-cycle and engaging in decision-making processes to take actions that align with company best interests
• Complex problem-solving skills with the ability to work with minimal supervision
• Legally eligible to work in the United States

Desirable

• Veeva is looking for an experienced Security Engineer to bolster the incident response and automation processes of the Security Operations team
• This role will provide the opportunity to engage in all operational areas of the team, especially in streamlining incident response playbooks, defending and prioritizing critical cloud resources, and ensuring reporting and detection processes are expedited using automation capabilities. This role will be placed in an on-call rotation
• Serve in an incident response capacity: triage alerts, analyze behaviors, coordinate with stakeholders and execute containment actions to mitigate threat activity to the network
• Craft and tune alerts to minimize false positive rates and indicate specific adversarial behavior
• Develop playbooks to automate various processes such as threat intel IOC ingestion, IOC database integration with other security tools, incident response scripts, and logging queries
• Maintain excellent awareness of the status of all on-prem and cloud devices’ reporting capabilities to the overarching tool suite, and take prompt action to ensure proper functionality and health of the tools
• Collaborate with various stakeholders to identify gaps and pitfalls in security issues
• Engage in security exercises and purple team events based upon gathered threat intelligence and relevant actors to simulate and understand the true risk to business operations
• Develop and maintain relevant performance metrics to influence decisions at higher leadership levels
• Proactively identify any security shortfalls and propose prioritized recommendations