Client: Autonomous Vehicle / Technology
Title: Information Security Engineer
Job Location: Foster City, CA
Duration: ~6 months
Pay Rate: $75 - $82/HR (W2 ONLY, NO C2C OR 3RD PARTIES)
The hourly pay rate is commensurate with experience and is an estimated rate provided by WorkGenius.
Work Arrangement: Onsite
About the Role
We are seeking a motivated and experienced Information Security Engineer to strengthen the organization’s security posture through automation, threat hunting, and enhanced detection capabilities.
The ideal candidate will have a strong background in Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR) platforms, along with proficiency in Python scripting. This role will focus on developing automated security workflows, improving detection capabilities, and responding to sophisticated cybersecurity threats.
Responsibilities
SIEM & SOAR Platform Management
- Maintain SIEM and SOAR platforms to support effective security threat detection and response
- Develop and fine-tune detection and correlation rules, dashboards, and reports within the SIEM
- Create, manage, and optimize SOAR playbooks to automate incident response processes and improve security operations
Automation & Scripting
- Use Python to develop custom integrations and automate repetitive security operations tasks
- Build and maintain automation workflows for threat detection, alert triage, and incident response
- Integrate security tools and threat intelligence feeds with SIEM and SOAR platforms using APIs and custom scripts
Incident Response & Threat Hunting
- Conduct proactive threat hunting to identify potential security gaps and indicators of compromise
- Analyze security alerts and data from multiple sources to identify and respond to potential security incidents
Collaboration & Documentation
- Partner with Information Security and cross-functional teams to enhance the organization’s overall security posture
- Create and maintain documentation for detection rules, automation workflows, and incident response procedures
Qualifications
- 6+ years of experience in a Security Engineering role supporting a Security Operations Center (SOC) environment or similar function
- Demonstrated experience with SOAR platforms and playbook development, such as:
-
- Palo Alto Cortex XSOAR
- Splunk SOAR
- Tines
- Proficiency in Python for security scripting and automation
- Strong understanding of incident response, threat intelligence, and cybersecurity frameworks, including MITRE ATT&CK and NIST
- Strong analytical and problem-solving skills
- Ability to work effectively in a fast-paced environment
Bonus Qualifications
- Relevant industry certifications such as CISSP, GCIH, or similar
- Experience with cloud security across AWS, Azure, or Google Cloud Platform
- Familiarity with additional scripting languages such as PowerShell or Bash
- Knowledge of network and endpoint security solutions
