Security Engineer

Grand BK Corp is hiring a Security Engineer to strengthen security operations and build detection and automation capabilities across its tooling, endpoints, and cloud environment. This onsite role in Carlstadt, NJ focuses on daily security monitoring, incident response, and hands-on work with SIEM and SOAR to improve detection quality and reduce time to action.

You will also support threat hunting, vulnerability management, security controls for AWS, and compliance activities including PCI-DSS evidence collection and access review processes. Working in coordination with an external SOC, you will help triage alerts, escalate confirmed incidents, and support ongoing security improvement initiatives.

Key Responsibilities

• Monitor and manage security tools including XDR/EDR, SIEM, vulnerability scanners, and email security; review security dashboards and alerts on a daily basis.
• Coordinate with the external SOC for alert triage and escalation, document alert dispositions (true positive, false positive, benign), and escalate confirmed incidents.
• Serve as first responder for security incidents, performing triage, containment, evidence collection with chain-of-custody documentation, and forensic analysis.
• Develop, tune, and test SIEM detection rules, correlation logic, and SOAR playbooks to enhance automated detection and response.
• Conduct proactive threat hunting using endpoint, network, and cloud telemetry; support purple team exercises with the SOC.
• Monitor threat intelligence sources including NVD and CISA alerts and vendor bulletins, converting relevant advisories into detection signatures to prioritize vulnerabilities.
• Run vulnerability scans and assessments using Nessus and Kenna, track remediation and patch compliance, and follow up with IT teams on overdue items.
• Perform web application security assessments (OWASP Top 10) and internal penetration tests, and coordinate external penetration testing engagements and validation of findings.
• Collect and maintain PCI-DSS compliance evidence, execute access reviews (AD, AWS IAM), and support configuration audits and external audit walkthroughs.
• Implement and maintain AWS security controls such as WAF rules, security groups, and network ACLs, including support for firewall rule management.
• Support PAM operations and controls for USB and external storage (SecurA), endpoint compliance monitoring, and Zero Trust initiatives including micro-segmentation and identity verification.
• Lead or execute assigned technical security projects including PAM deployments, tool rollouts, and compliance initiatives.
• Run security awareness training and phishing simulation campaigns, manage the training platform, and track completion rates.
• Handle security account provisioning and access requests, manage onboarding and offboarding security checklists, keep policies and runbooks up to date, and produce weekly and monthly security metrics reports.

Requirements

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field.
• 4+ years of experience in information security, security engineering, security operations, or IT infrastructure (Level I or II based on experience).
• Strong knowledge of network security (TCP/IP, DNS, firewall, VPN, IDS/IPS, network segmentation) and operating system security and hardening (Windows Server, Linux).
• Hands-on experience operating security tools including SIEM/XDR, endpoint protection, and vulnerability scanners (Nessus, Kenna, Nmap), with alert analysis, triage, and patch coordination.
• Experience with security incident response and forensic analysis, plus familiarity with common attack vectors (phishing, malware, ransomware) and the MITRE ATT&CK framework.
• Experience in detection engineering, threat hunting, and security automation, including SOAR platforms and playbook development.
• Scripting skills for security automation (Python, PowerShell, or Bash) and knowledge of penetration testing tools and methods (Burp Suite, Metasploit, OWASP).
• Cloud security experience, preferably AWS (IAM, Security Groups, CloudTrail).
• Experience with PCI-DSS or other compliance frameworks, ideally in retail; experience working with an external SOC or MSSP is preferred.
• Certifications such as CompTIA Security+, CySA+, CEH, or GSEC are preferred; advanced certifications (CISSP, GCIA, GCIH, SSCP) are a plus.
• Bilingual in Korean and English preferred.

Compensation and Work Schedule

• Salary: $87,450 to $134,200 per year
• Schedule: Mon-Fri, 8:30am to 5:30pm
• Actual compensation will be determined based on relevant experience, qualifications, skills, and other job-related factors.

Benefits

• Health, Dental & Vision insurance / EAP (Employee Assistance Program) per company policy
• 401(k) Retirement Plan with up to 5% match per company policy
• Life Insurance and AD&D per company policy
• BTA Insurance (Business Travel Accident Coverage)
• Company provided lunch
• Paid-time off (PTO) and Paid Holidays per company policy
• Celebration & Condolence Benefits per company policy
• Smart Card: Earn additional 4 points to the standard $1 = 1 point
• Holiday Gift certificates per company policy
• FSA (Flexible Spending Account) per company policy
• DCFSA (Dependent Child Care Spending Account) per company policy

Technologies

• XDR/EDR, SIEM, vulnerability scanners, email security
• NVD, CISA alerts
• Nessus, Kenna, Nmap
• OWASP Top 10, Burp Suite, Metasploit
• PCI-DSS, AD, AWS IAM, AWS
• WAF, security groups, network ACLs
• PAM, SecurA, micro-segmentation, identity verification, Zero Trust
• SOAR, Python, PowerShell, Bash
• MITRE ATT&CK, TCP/IP, DNS, firewall, VPN, IDS/IPS
• Windows Server, Linux, CloudTrail
• CompTIA Security+, CySA+, CEH, GSEC, CISSP, GCIA, GCIH, SSCP