Security Engineer, NinjaOne

• Demonstrable experience in incident response and digital forensics, utilizing industry-standard tools
• Expertise in securing and managing cloud environments, with a strong preference for AWS
• Proficiency in working with Windows, macOS, and Linux operating systems for security assessments and investigations
• Deep understanding of the MITRE ATT&CK framework for threat detection and response
• Experience in developing, deploying, and maintaining enterprise-grade security tools
• Familiarity with threat hunting and CTI activities
• Strong skills in interpreting networking and system artifacts across multiple operating systems
• Knowledge of compliance frameworks such as ISO 27001, SOC 2, and GDPR
• Near-fluent English proficiency (C1 level or higher), with strong communication skills

Desirable

• We are looking for a highly skilled Security Engineer with expertise in incident response, digital forensics, and cloud environments (preferably AWS) to join our globally distributed team. As a critical member of our security operations, you will be responsible for safeguarding our systems by developing, deploying, and maintaining advanced security tools while actively engaging in threat hunting and cyber threat intelligence (CTI) initiatives.
• This role is perfect for a motivated professional familiar with compliance frameworks and experienced with diverse operating systems (Windows, macOS, Linux) who thrives in a remote and dynamic environment
• Incident Response & Digital Forensics: Lead and support the end-to-end incident response lifecycle, utilizing digital forensics tools to investigate and remediate security incidents effectively
• Cloud Security: Manage and secure cloud environments (preferably AWS), including configuring security controls, monitoring threats, and ensuring compliance
• System Expertise: Conduct investigations and assessments across Windows, macOS, and Linux systems, ensuring a robust and secure infrastructure
• MITRE ATT&CK Framework: Apply the MITRE ATT&CK framework to identify, understand, and mitigate threats proactively
• Enterprise Security Tools: Assist in the development, deployment, and ongoing maintenance of enterprise security tools for continuous monitoring, threat detection, and risk assessment
• Threat Intelligence & Hunting: Engage in threat hunting activities and support cyber threat intelligence (CTI) efforts to identify emerging threats and mitigate risks
• Compliance & Governance: Maintain compliance with industry standards such as ISO 27001, SOC 2, and GDPR, ensuring our security practices align with regulatory requirements
• Networking and System Artifacts: Analyze and interpret networking, Windows, and *Nix artifacts for incident response and forensic analysis
• Other duties as needed