An employer is seeking a L3 Security Operations Engineer for a direct hire opportunity. This individual will be a dedicated resource for a large banking/ financial customer. This position is responsible for security alert monitoring and remediation for all security products and customers supported out of the Security Operations Center. This operational position requires the engineer to be responsible for the surveillance and control of Security Operations Center monitoring system. Responsibilities will include but not be limited to responding to any auto-generated alarm incidents ensuring the integrity of customer network, computer, and end user environments, In addition this position will be responsible for handling any triggering incidents or service requests based on customer emails to shared inboxes, Service Desk tickets, and/or Call Records, handling escalations from the Level 2 engineers, handling Level 3 incident troubleshooting, handling customer engagement via customer defined processes and protocols. Transitioning incident and service request support to Security Operations Leads and L4 engineers or higher and/or Customer Engineering Teams. The support provided must be conducted in a manner that meets and/or exceeds agreed upon Service Level Agreements (SLAs) defined within customers statements of work and corporate T-Cs, that is procedurally compliant, and that ensures data integrity and detailed recording of information in tickets.

* (40%) Security Operations -- Monitor security alerts and events and follow playbooks to respond to and escalate security incidents.

* (30%) Security Escalations -- Assist Tier 1 & 2 team in responding to more severe security alerts.

* (10%) Technical Training -- A SOC expert -- L3 is expected to keep up to date on the latest security trends and technologies. Time will be available for continued training.

* (20%) Security Implementation -- This could include the following: documenting procedures, Administer security applications, system and/or security reviews, vulnerability scans, system patching, and other security related tasks.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com .

To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/ .

Required Skills & Experience

4-5 years of experience within security operations -- malware analysis, threat detection, vulnerability management, patching, etc.

4 years of Splunk experience

Experience using GitHub

Fluent in Wireshark

Great communication -- experience working with customers & stakeholders

Nice to Have Skills & Experience

Qualys experience

Network background -- CCNA

Benefit packages for this role will start on the 31st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.