Security Operations Engineer

📋 Description

• • As a Security Operations Engineer at Fair Isaac Corporation (FICO), you will be an integral part of our world-class Security Operations (SOC) team, taking on a hands-on technical role focused on the day-to-day activities of cyber protection and automation development. This position offers a unique opportunity to contribute directly to FICO's robust cybersecurity posture, safeguarding our global operations and client data.
• • Your primary responsibilities will involve the meticulous investigation and response to intrusion events and security incidents. You will leverage advanced tools such as Security Information and Event Management (SIEM) systems, Security Orchestration, Automation, and Response (SOAR) platforms like XSOAR, in-depth file analysis, and endpoint logs to identify, analyze, and neutralize threats.
• • You will actively support comprehensive cybersecurity incident response activities. This includes, but is not limited to, the critical phases of discovery, containment, and mitigation, ensuring that incident response workflows are executed efficiently and effectively to minimize potential impact.
• • A key aspect of your role will be the testing and evaluation of security use-cases, alongside the fine-tuning of existing ones to enhance their accuracy and effectiveness in detecting and responding to evolving threats.
• • You will play a crucial role in identifying and ensuring the collection of necessary log sources for both cybersecurity monitoring and compliance requirements within our SIEM infrastructure, providing a comprehensive view of our security landscape.
• • Generating appropriate and actionable alerts within the SIEM will be essential, as these alerts will serve as the foundation for our automation activities, enabling faster and more efficient threat detection and response.
• • You will be instrumental in writing and developing automation scripts and playbooks within the SOAR platform to accelerate incident response (IR) activities. Proficiency in scripting languages such as Java, Python, or Bash will be vital in this endeavor.
• • Your involvement will extend to participating actively in continuous monitoring and incident response efforts, ensuring that our defenses are always vigilant and that responses are swift and decisive.
• • You will be responsible for the creation and analysis of security workflows, identifying areas for improvement and implementing optimizations to enhance operational efficiency and effectiveness.
• • A critical part of your daily work will involve analyzing, prioritizing, and escalating any security issues that pose a potential risk to business objectives, operational results, or critical processes, ensuring timely resolution and risk mitigation.
• • This role demands a proactive approach to threat intelligence and a deep understanding of attacker methodologies to anticipate and defend against potential breaches.
• • You will contribute to the continuous improvement of our security tools and processes, staying abreast of the latest industry trends and best practices in cybersecurity operations.
• • Collaborating with cross-functional teams, including IT, development, and other security personnel, will be essential to ensure a holistic approach to security across the organization.
• • The opportunity to work remotely from Mexico allows for flexibility while contributing to a globally recognized leader in analytics software.
• • You will be part of a company that is committed to making a real difference in how businesses operate worldwide, from credit scoring and fraud detection to lending and beyond, utilizing advances in AI, machine learning, and optimization.