[Remote] Senior - Security Engineer, Information Security (51372)

Note: The job is a remote job and is open to candidates in USA. Citrin Cooperman offers a dynamic work environment, fostering professional growth and collaboration. They are seeking a Senior Security Engineer to join their Information Security team, responsible for protecting digital assets through the management of security technologies and leading incident response efforts.ResponsibilitiesDeploy and manage EDR solutions across enterprise endpoints including workstations, servers, and mobile devicesConfigure detection rules and automated response actions to identify malware, suspicious behaviors, and advanced persistent threatsConduct proactive threat hunting to identify compromised systems and hidden threatsMaintain agent deployment coverage and optimize EDR performance across all critical assetsAdminister SIEM platform including log source onboarding, parsing, and correlation rule developmentDesign use cases and correlation rules to detect security incidents and policy violationsMonitor and triage security alerts to determine severity, scope, and impactCreate dashboards and reports for security metrics, compliance, and executive visibilityIntegrate threat intelligence feeds to enhance detection capabilitiesServe as escalation point for security incidents following established proceduresPerform digital forensics and investigation including log analysis, memory analysis, and disk forensicsCoordinate incident response across IT, legal, HR, and executive stakeholdersDocument incidents thoroughly include timelines, indicators of compromise, and remediation actionsDevelop and maintain incident response playbooks for common attack scenariosParticipate in tabletop exercises and conduct post-incident reviews to improve security postureEstablish and maintain a continuous vulnerability management programDeploy and manage vulnerability scanning tools across network, systems, applications, and cloud infrastructureAnalyze vulnerability scan results and prioritize remediation based on risk, exploitability, and business impactWork with system owners and IT teams to develop remediation plans and track vulnerability closureMonitor threat intelligence sources for emerging threats, exploit activity, and vulnerabilities affecting the organizationConduct risk assessments for newly discovered vulnerabilities and provide guidance on compensating controlsGenerate vulnerability metrics and reports for management and compliance purposesIntegrate vulnerability data with SIEM and EDR for enhanced threat correlationPerform penetration testing coordination and validate remediation effectivenessMaintain vulnerability management policies, procedures, and SLAsParticipate in 24/7/365 security operations center (SOC) rotation (if applicable) or on-call rotationCollaborate with IT operations, development, and business teams on security initiativesMentor junior security analysts and share knowledge across the security teamStay current with emerging threats, attack techniques, and security technologiesContribute to security awareness training programs by providing real-world incident examplesManage email security gateway solutions to detect and block malicious emails, phishing attempts, and spamInvestigate and respond to reported phishing emails and business email compromise (BEC) attemptsAnalyze email-based threats and implement rules to block malicious senders, domains, and attachment typesMonitor email security metrics and trends to identify emerging attack patternsWork with human security awareness team to shape awareness campaigns and phishing simulations to improve user vigilanceImplement and manage DLP solutions across email, endpoints, network, and cloud applicationsCreate and tune DLP policies to prevent unauthorized data exfiltration while minimizing false positivesMonitor DLP alerts and investigate potential data leakage incidentsClassify sensitive data and configure appropriate protection controls based on data classificationCollaborate with business units to understand data flows and implement appropriate DLP controlsGenerate DLP metrics and reports for compliance and risk management purposesSkillsHave a bachelor's degree in computer science, Information Security, Cybersecurity, or technical field relatedHave equivalent work experience may be considered in lieu of degree3+ years of hands-on experience in information security operations, SOC, or similar roleHave demonstrated experience with EDR platforms and endpoint security managementHave experience conducting incident response investigations and forensic analysisHave hands-on experience with vulnerability management and remediation programsHave experience with email security solutions and investigating phishing/BEC attacksBe familiar with DLP technologies and data protection strategiesHave a track record of managing security incidents from detection through resolutionPossess a strong understanding of attack vectors, TTPs, and MITRE ATT&CK frameworkBe proficient in log analysis, correlation, and security event interpretationHave experience with EDR platforms (CrowdStrike, SentinelOne, Microsoft Defender, Carbon Black, Cortex XDR)Have hands-on experience with SIEM solutions (Splunk, QRadar, Azure Sentinel, LogRhythm, Elastic SIEM)Be knowledgeable of vulnerability management tools (Tenable, Qualys, Rapid7)Have experience with email security gateways (Proofpoint, Mimecast, Barracuda, Microsoft Defender for Office 365)Be familiar with DLP platforms (Symantec DLP, Microsoft Purview, Forcepoint, Digital Guardian)Understand network protocols, packet analysis, and network security monitoringHave experience with scripting/automation (Python, PowerShell, Bash) for security operationsBe knowledgeable of cloud security (AWS, Azure, GCP) and hybrid environmentsUnderstand security frameworks (NIST CSF, CIS Controls, ISO 27001, MITRE ATT&CK)Be knowledgeable of compliance requirements (PCI DSS, HIPAA, SOX, GDPR) as applicablePossess a strong security‑focused mindset with deep understanding of compliance frameworksWork effectively under pressure and adapt to rapidly changing environmentsBe highly analytical, detail‑oriented, and self‑driven with strong ownershipPossess excellent verbal and written communication skillsPossess strong collaboration, interpersonal skills, and consistent follow‑throughBenefitsCompetitive compensation and benefitsFlexibility to manage your personal and professional life to focus on what matters most to youCompany OverviewCitrin Cooperman is a professional services firm that provides advisory, assurance, and tax solutions to clients. It was founded in 1979, and is headquartered in New York, New York, USA, with a workforce of 1001-5000 employees. Its website is http://www.citrincooperman.com/.Company H1B SponsorshipCitrin Cooperman has a track record of offering H1B sponsorships, with 1 in 2022, 1 in 2021, 3 in 2020. Please note that this does not guarantee sponsorship for this specific role.