Security Engineer

IMR Soft LLC is seeking a Security Engineer - III to lead incident response engagements and enhance client security postures. The role involves managing workstreams, applying investigative workflows, and collaborating on proactive service initiatives.

Responsibilities:

• Lead Incident Response engagements by delegating workstreams, analysing artifacts, and maintaining central oversight to ensure seamless customer outcomes
• Apply rigorous investigative workflow to every engagement, documenting evidence and IOCs to build a robust internal knowledge base
• Lead or support the delivery of off-the-shelf and custom proactive services, leveraging data-driven insights to align security offerings with client operational goals
• Actively collaborate on the creation of new proactive service initiatives and service delivery models

Requirements:

• Consulting Experience - Exceptional soft skills with a proven ability to manage customer expectations and maintain accountability throughout the incident response lifecycle
• Crisis Communication: The ability to remain composed and communicate technical findings clearly to stakeholders while working under the high-pressure environment of a live incident
• Technical Proficiency in SIEM & EDR: Hands-on experience utilizing Splunk and CrowdStrike for threat hunting and incident analysis
• Academic Background: Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a closely related technical field
• Certifications: Industry-standard certifications from organizations such as SANS (GIAC), ISC2 (CISSP), or EC-Council
• Tabletop Exercise (TTX) Facilitation: Experience designing and delivering tabletop exercises to test and mature a client's incident response readiness
• Cybersecurity Instruction & Training: Ability to develop and deliver technical security training or workshops for diverse audiences, from SOC analysts to C-suite executives
• Advanced Incident Response: Deep expertise in memory forensics, malware analysis, and identifying advanced persistent threat (APT) lateral movement
• Strategic Security Advisory: Ability to translate raw threat intelligence into strategic recommendations that improve a client's long-term security posture
• Specialized Training: Advanced DFIR-specific training (e.g., GCIH, GCFA, or GCFE) is highly encouraged