Security Engineer I

The Security Engineer I is a hands-on technical practitioner responsible for the day-to-day operation of Lendistry's security monitoring, incident response, and vulnerability management capabilities across corporate IT, cloud, and third-party environments. This role partners closely with the Security Engineer Lead, the SOC and MSSP, Infrastructure, Cloud Engineering, Application Engineering, and GRC to detect threats early, respond quickly, and drive security issues to closure without slowing business velocity.

Responsibilities

Monitor, triage, and investigate security alerts from SIEM, EDR, email security, and cloud-native tools, escalating confirmed threats to the Security Engineer Lead; Act as first responder and incident coordinator, executing incident response playbooks through detection, containment, eradication, and recovery; Maintain incident records, timelines, and evidence; facilitate post-incident reviews and track corrective actions to closure; Provide timely incident status updates to IT, Legal, Compliance, and leadership, following established escalation paths; Partner with the SOC and MSSP providers to validate alerts, refine escalation procedures, and improve response quality; Develop, maintain, and test incident response playbooks and runbooks; support tabletop exercises; Tune SIEM and EDR detection rules and policies to reduce false positives and improve detection coverage; Operate vulnerability scanning tools, validate findings, and track remediation against defined SLAs; Assist with vendor security assessments and collect evidence to support SOC 2, ISO 27001, and regulatory audit activities; Build and maintain security metrics and dashboards (e.g., mean time to detect and respond, incident volume, open vulnerabilities); Automate repetitive security tasks using scripting and available platform capabilities

Requirements

2–4 years of experience in cybersecurity engineering, security operations (SOC), or incident response; Hands-on experience with SIEM and EDR platforms for alert triage and investigation; Working knowledge of the incident response lifecycle (e.g., NIST SP 800-61) and common attack techniques (e.g., MITRE ATT&CK); Familiarity with AWS and/or Azure security services and cloud logging; Understanding of vulnerability management concepts, including CVSS scoring and remediation prioritization; Working knowledge of SOC 2 and ISO 27001 frameworks; Basic scripting ability (Python, PowerShell, or similar) for automation and analysis; Strong written and verbal communication skills, including clear incident documentation for technical and non-technical audiences

Nice to have

Bachelor's degree in a related field or equivalent experience; Certifications such as Security+, CySA+, GCIH, SC-200, or AWS Security Specialty

Benefits

Comprehensive Medical, Dental, and Vision Insurance; Generous Paid Time Off; Birthday Day Off; 12 Paid Company Holidays; 401(k) Match; FSA and HSA; Paid Life Insurance; Paid Disability Insurance; Pet Insurance; Employee Assistance Program (EAP); Professional Development Courses; In Office Provided Snacks and Drinks; Gym Facilities (LA & Tustin/CEC Offices); In Office Engagement Activities