Security Engineer

Monitor systems for abnormal activity. Analyze alerts, distinguish threats from false positives, categorize incidents by risk. - Lead incident response: containment, eradication, recovery, post-incident analysis, documenting steps. Optimize detection capabilities: refine alert thresholds, tune SIEM rules, integrate new data sources, reduce false positives. Compile weekly/monthly reports on incident trends, threat activity, and security posture for internal stakeholders. Actively participate in team meetings, threat intel reviews, and cross-departmental syncs., * Monitor systems for abnormal activity and analyze security alerts to identify potential threats.

• Lead incident response efforts, including containment, eradication, recovery, and post-incident analysis.
• Optimize detection capabilities by refining alert thresholds, tuning SIEM rules, and integrating new data sources to reduce false positives.
• Compile and present weekly/monthly reports on incident trends, threat activity, and overall security posture to internal stakeholders.
• Participate in team meetings, threat intelligence reviews, and cross-departmental synchronization efforts., System One, and its subsidiaries including Joulé, ALTA IT Services, CM Access, TPGS, and MOUNTAIN, LTD., are leaders in delivering workforce solutions and integrated services across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible full-time employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

• 5+ years of security engineering experience working for a FedRAMP or FISMA Moderate system in an AWS GovCloud environment.
• Hands-on experience with UiPath architecture: Orchestrator, attended/unattended robots, assets and credential stores, queues, and robot host builds.
• Design and implementation experience with service account models, credential vaulting, RBAC, separation of duties, and session/audit logging.
• Knowledge of NIST SP 800-53 Rev 5 Moderate controls applied in build decisions across AC, AU, CM, IA, and SC families.
• Experience with STIG/CIS hardening, vulnerability scanning, patch management, and configuration management.
• Understanding of secure SDLC processes and code review skills for automation workflows and scripts.
• Ability to translate engineering decisions into control language for the A&A team.

System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.