Engineer Level 3 Security Engineer

Kforce has a client that is seeking an Engineer Level 3 Security Engineer in Blue Ash, OH., * Lead containment, eradication, and recovery efforts for endpoint, cloud, identity, and other security incidents

• Serve as an escalation point for complex security events and incidents
• Investigate security events and determine appropriate response actions
• Contribute to the development and improvement of security playbooks and runbooks
• Provide feedback to the Detection team to improve the quality of detections, enrichment, and automated response
• Collaborate with cross-functional teams to improve logging visibility and response readiness
• Contribute to operational maturity through playbooks, mentoring, tabletop exercises, detections, and audits
• Mentor junior team members and help build their Security Operations capabilities
• Communicate technical information effectively to both technical and non-technical stakeholders

This is a senior-level individual contributor role requiring strong Security Operations experience, critical thinking, attention to detail, and the ability to communicate effectively in high-pressure situations. The ideal candidate will be able to break down complex technical information and communicate clearly with both technical and non-technical stakeholders., * Strong experience in Security Operations, security investigations, and incident response

• Hands-on experience investigating and responding to security events and incidents
• Experience supporting containment, eradication, and recovery activities
• Experience with security alerts and detections
• Experience developing or maintaining security playbooks and/or runbooks
• Understanding of Security Operations tooling such as SIEM/SOAR, EDR, email security gateways, and firewalls
• Strong critical-thinking and problem-solving skills
• Ability to break down complex technical topics and communicate them clearly to technical and non-technical audiences
• Strong written and verbal communication skills
• Demonstrated leadership within an individual contributor role
• Experience mentoring junior team members

Nice-to-Haves:

• Experience with detection engineering
• Experience with rule or alert tuning
• Familiarity with the MITRE ATT&CK framework, including mapping security activity or detections to relevant tactics and techniques
• Experience with cloud environments such as Azure, Google Cloud Platform, or AWS
• Familiarity with Google Security Operations
• Experience contributing to tabletop exercises or security audits

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce’s sole discretion unless and until paid and may be modified in its discretion consistent with the law.