About this role
DailyPay is transforming the way people get paid with its award-winning technology platform. They are seeking a detail-oriented Security Operations Engineer to monitor security alerts, triage potential threats, and work with senior engineers to protect the organization’s data.
Responsibilities:
- Review and analyze reported suspicious emails
- Perform header analysis, URL sandboxing, and attachment detonation to identify malicious intent
- Execute remediation steps, such as purging malicious emails from the environment
- Monitor DLP consoles for unauthorized movement of sensitive data
- Investigate incidents involving PII or intellectual property
- Work with business units to distinguish between legitimate workflows and policy violations
- Investigate potential Account Takeover (ATO) alerts
- Verify user activity and coordinate password resets or session revocations when compromises are suspected
- Monitor the SIEM (Security Information and Event Management) for alerts across endpoints, networks, and cloud environments
- Follow standard operating procedures (SOPs) to escalate high-severity incidents to Tier 2/3 analysts
- Assist in routine scans and ensure security agents are healthy and reporting correctly across the fleet
Requirements:
- Bachelor's degree in Cybersecurity, Computer Science, IT, or equivalent experience/certifications
- Foundational understanding of the TCP/IP stack and common protocols (HTTP, DNS)
- Familiarity with macOS, and Linux operating systems
- Ability to correlate disparate data points to identify patterns of malicious behavior
- Strong written skills for documenting incident findings and communicating with employees regarding security policy
- A 'student of the game' mentality—staying up to date with the latest threat actor TTPs (Tactics, Techniques, and Procedures)