Motion Recruitment
Senior Cyber Security Engineer - Remote/MCP/AI/Automation/ServiceNow
Motion Recruitment, Mountain View, California, us, 94039
Overview Senior Cyber Security Engineer - Remote/MCP/AI/Automation/ServiceNow
12 Month Contract (Possible Extension)
Location: 100% Remote (Client located in Mountain View, CA or Brooklyn, NY)
Work Shift: Monday through Friday (8:00AM – 5:00PM PST)
Must be able to work on W-2 basis
Job Description This global financial technology leader has an immediate long-term contract opportunity in Mountain View, CA for a Cybersecurity Engineer. This position requires working onsite Monday-Friday.
Contract Duration: 12+ Months
Responsibilities
Respond to escalated security events and investigations, coordinating communications and executing the Incident Response Plan as needed. Lead and provide support for critical security incidents, delivering timely and clear status updates to stakeholders. Provide clear and concise communications in collaborative environments, stakeholder verbal reports, and senior leadership presentations. Perform comprehensive host, network, and cloud forensic analysis to determine the root cause, scope, and impact of security incidents while preserving evidence. Analyze and correlate signals from SIEM, EDR, and other platform logs to validate and triage threats. Develop, maintain, and continuously improve incident response playbooks and runbooks to ensure prompt and compliant actions. Design and implement automated security workflows and response actions using platforms such as Workato and ServiceNow. Partner with Detection Engineering to create and tune detections based on lessons learned from incidents. Support and enhance security for AWS infrastructure through MCP (Model Context Protocol) server engineering. Research and apply AI, Large Language Models, and agentic SOC concepts to enhance threat detection, security operations, and incident response. Collaborate with Compliance, Legal, and Risk teams to ensure incident response workflows align with business and regulatory requirements. Assess vulnerabilities, propose effective remediation strategies, and stay current on emerging security threats and countermeasures. Provide training and guidance on security best practices to organizational partners and mentor other incident responders. Contribute to post-incident reviews and the development of metrics to drive continuous program improvement. Exceptional written and verbal communication skills, with the ability to explain technical concepts to non-technical audiences. Proven experience in developing automation and workflows, particularly with platforms like Workato and ServiceNow. Experience with MCP server engineering for AWS infrastructure. Proficient understanding of AI technologies, Large Language Models, and their application in security operations. Experience using and defending public cloud services such as AWS, Azure, and GCP (IAM, CI/CD Pipelines, Network Security, DLP). Experience performing analysis using EDR or CSPM tools (e.g., CrowdStrike Falcon, Microsoft Defender, Wiz) and SIEM solutions (e.g., Splunk, LogScale). Deep knowledge of the Security Incident Response Lifecycle (e.g., NIST, SANS) and security fundamentals, including frameworks like MITRE ATT&CK/D3FEND, OWASP, and CIS. Strong analytical and problem-solving skills with the ability to identify root causes and assess risk. Self-motivated and adaptable, with the ability to work autonomously and manage tasks effectively under pressure. Industry certifications such as GCIH, GCFA, AWS Security Specialty, CISSP, or CompTIA CySA+ are advantageous. Nice to Haves: Active involvement in the security community, such as research, publications, or open-source contributions. Required Skills
4+ years of experience in a dedicated cybersecurity role, with a strong emphasis on incident response and digital forensics specialization. 2+ years of experience with programming and scripting languages such as Python, Rust, PowerShell, and bash. Cybersecurity experience or a related field is preferred. Preferred Skills Active involvement in the security community, such as research, publications, or open-source contributions. Education A Bachelor’s degree in Computer Science, or foreign equivalent, in Computer Science, information systems management, engineering (any field), or closely related quantitative discipline. Benefits
Medical Insurance & Health Savings Account (HSA) 401(k) Motion Recruitment provides IT Staffing Solutions (Contract, Contract-to-Hire, and Direct Hire) in major North American markets. Our unique expertise in today’s highest-demand tech skill sets, paired with our deep networks and knowledge of our local technology markets, results in an exemplary track record with candidates and clients. Applicants must be currently authorized to work in the U.S. on a full-time basis now and in the future. Seniority level
Mid-Senior level Employment type
Contract Job function
Marketing Referrals increase your chances of interviewing at Motion Recruitment by 2x Mountain View, CA $72.00-$82.18 6 days ago
Do you have the right skills and experience for this role Read on to find out, and make your application. #J-18808-Ljbffr Remote working/work at home options are available for this role.
Respond to escalated security events and investigations, coordinating communications and executing the Incident Response Plan as needed. Lead and provide support for critical security incidents, delivering timely and clear status updates to stakeholders. Provide clear and concise communications in collaborative environments, stakeholder verbal reports, and senior leadership presentations. Perform comprehensive host, network, and cloud forensic analysis to determine the root cause, scope, and impact of security incidents while preserving evidence. Analyze and correlate signals from SIEM, EDR, and other platform logs to validate and triage threats. Develop, maintain, and continuously improve incident response playbooks and runbooks to ensure prompt and compliant actions. Design and implement automated security workflows and response actions using platforms such as Workato and ServiceNow. Partner with Detection Engineering to create and tune detections based on lessons learned from incidents. Support and enhance security for AWS infrastructure through MCP (Model Context Protocol) server engineering. Research and apply AI, Large Language Models, and agentic SOC concepts to enhance threat detection, security operations, and incident response. Collaborate with Compliance, Legal, and Risk teams to ensure incident response workflows align with business and regulatory requirements. Assess vulnerabilities, propose effective remediation strategies, and stay current on emerging security threats and countermeasures. Provide training and guidance on security best practices to organizational partners and mentor other incident responders. Contribute to post-incident reviews and the development of metrics to drive continuous program improvement. Exceptional written and verbal communication skills, with the ability to explain technical concepts to non-technical audiences. Proven experience in developing automation and workflows, particularly with platforms like Workato and ServiceNow. Experience with MCP server engineering for AWS infrastructure. Proficient understanding of AI technologies, Large Language Models, and their application in security operations. Experience using and defending public cloud services such as AWS, Azure, and GCP (IAM, CI/CD Pipelines, Network Security, DLP). Experience performing analysis using EDR or CSPM tools (e.g., CrowdStrike Falcon, Microsoft Defender, Wiz) and SIEM solutions (e.g., Splunk, LogScale). Deep knowledge of the Security Incident Response Lifecycle (e.g., NIST, SANS) and security fundamentals, including frameworks like MITRE ATT&CK/D3FEND, OWASP, and CIS. Strong analytical and problem-solving skills with the ability to identify root causes and assess risk. Self-motivated and adaptable, with the ability to work autonomously and manage tasks effectively under pressure. Industry certifications such as GCIH, GCFA, AWS Security Specialty, CISSP, or CompTIA CySA+ are advantageous. Nice to Haves: Active involvement in the security community, such as research, publications, or open-source contributions. Required Skills
4+ years of experience in a dedicated cybersecurity role, with a strong emphasis on incident response and digital forensics specialization. 2+ years of experience with programming and scripting languages such as Python, Rust, PowerShell, and bash. Cybersecurity experience or a related field is preferred. Preferred Skills Active involvement in the security community, such as research, publications, or open-source contributions. Education A Bachelor’s degree in Computer Science, or foreign equivalent, in Computer Science, information systems management, engineering (any field), or closely related quantitative discipline. Benefits
Medical Insurance & Health Savings Account (HSA) 401(k) Motion Recruitment provides IT Staffing Solutions (Contract, Contract-to-Hire, and Direct Hire) in major North American markets. Our unique expertise in today’s highest-demand tech skill sets, paired with our deep networks and knowledge of our local technology markets, results in an exemplary track record with candidates and clients. Applicants must be currently authorized to work in the U.S. on a full-time basis now and in the future. Seniority level
Mid-Senior level Employment type
Contract Job function
Marketing Referrals increase your chances of interviewing at Motion Recruitment by 2x Mountain View, CA $72.00-$82.18 6 days ago
Do you have the right skills and experience for this role Read on to find out, and make your application. #J-18808-Ljbffr Remote working/work at home options are available for this role.