ActBlue

Security Engineer

• Author, tune, and maintain detections as code in the SIEM/SOAR pipeline
• Identify detection and tooling gaps and propose architecture improvements
• Serve on the on-call rotation and coordinate escalations with the third-party managed SOC
• Operate email security, endpoint security, and DLP controls
• Investigate and resolve high-sensitivity signals and tune controls
• Run tabletop exercises and deliver workforce security training
• Produce threat intelligence that shapes team priorities
• Restrict, suspend, or revoke employee system access when active risk is identified
• Define security requirements and detection coverage for identity and audit collection
• Conduct sensitive matter reviews using forensically sound evidence handling and chain-of-custody discipline
• Independently lead complex employee conduct, insider risk, access misuse, and data exfiltration reviews
• Conduct forensic analysis across endpoint, identity, email, cloud, and SaaS sources
• Produce findings, evidence summaries, technical analyses, and timelines
• Preserve evidence for legal holds and formal proceedings
• Interpret findings and recommend resolutions
• Improve Corporate Security methodology, evidence standards, and reporting standards
• Manage the SOC relationship and coordinate forensic vendors and external specialists
• Exercise independent judgment over review methodology and evidence handling
• Maintain chain-of-custody, evidence-handling, and confidentiality controls

Senior Corporate Security Specialist