> Markdown version of [/jobs/ext/2925396-it-security-engineer-iv](https://www.wearedevelopers.com/jobs/ext/2925396-it-security-engineer-iv). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IT Security Engineer IV

- **Company:** Russell Tobin
- **Location:** San Francisco, CA, United States (Remote available)
- **Salary:** $166,400.0 - $172,640.0
- **Contract:** Temporary to permanent
- **Skills:** Artificial Intelligence, Intrusion Detection and Prevention, Security Information and Event Management, Servicenow
- **Published:** September 15, 2026
- **Apply:** https://www.dice.com/job-detail/32ed602c-9ef1-4ccc-8a64-6f20c40781ad

## About the Role

Bachelor's degree in an IT-related or Engineering field.

## Description

* Respond to and lead critical, escalated security incidents: coordinating communications, executing the Incident Response Plan, and delivering clear, timely status updates to stakeholders and senior leadership.
 * Perform comprehensive host, network, and cloud forensic analysis to determine root cause, scope, and impact, ensuring containment is validated against Client control-testing standard before an incident is closed.
 * Analyze and correlate signals across SIEM, EDR, and other platform logs to triage and validate threats.
 * Develop, maintain, and improve incident response playbooks and runbooks in partnership with the SOC's Analysis Champ and other capability owners.
 * Operate within existing automated workflows in ServiceNow SIR, following and refining established processes.
 * Flag detection gaps and false-positive patterns identified during live incidents to Detection Engineering for tuning and new detection development.
 * Use outputs from Mate AI SOC platform to inform triage and investigation decisions.
 * Collaborate with Compliance, Legal, and Risk to ensure response workflows meet business and regulatory requirements.
 * Assess vulnerabilities, propose remediation, and stay current on emerging threats and countermeasures.
 * Provide training and mentorship to other incident responders on best practices.
 * Contribute to post-incident reviews and help build metrics that drive continuous program improvement.

Preferred Experience

 * Respond to and lead critical, escalated security incidents: coordinating communications, executing the Incident Response Plan, and delivering clear, timely status updates to stakeholders and senior leadership.
 * Perform comprehensive host, network, and cloud forensic analysis to determine root cause, scope, and impact, ensuring containment is validated against Client control-testing standard before an incident is closed.
 * Analyze and correlate signals across SIEM, EDR, and other platform logs to triage and validate threats.
 * Develop, maintain, and improve incident response playbooks and runbooks in partnership with the SOC's Analysis Champ and other capability owners.
 * Operate within existing automated workflows in ServiceNow SIR, following and refining established processes.
 * Flag detection gaps and false-positive patterns identified during live incidents to Detection Engineering for tuning and new detection development.
 * Use outputs from Mate AI SOC platform to inform triage and investigation decisions.
 * Collaborate with Compliance, Legal, and Risk to ensure response workflows meet business and regulatory requirements.
 * Assess vulnerabilities, propose remediation, and stay current on emerging threats and countermeasures.
 * Provide training and mentorship to other incident responders on best practices.
 * Contribute to post-incident reviews and help build metrics that drive continuous program improvement.