IT Security Engineer

ClearView is looking for an Information Security Professional to join our Information Technology team. This role will be responsible for three main areas: Supporting our Policy Review/Creation, User Awareness Training, and Monitoring/Testing to ensure compliance.  This position requires the ability to work with minimal direction, flexibility to changing demands and having an eye for process improvement.  This position will work in our India office but will be responsible for ClearView’s Information Security globally. 

Responsibilities 

Security monitoring and incident support 

• Monitor security tools and dashboards (e.g., SIEM, endpoint security, email security) for alerts and suspicious activity and help triage and escalate as needed. 

• Tune SIEM rules, correlation searches, and alert thresholds to reduce noise and improve detection quality under the guidance of senior staff. 

• Build and maintain SIEM dashboards and reports that give IT and leadership visibility into security events and trends. 

• Assist in initial investigation of security incidents (log collection, basic analysis, documentation) and support remediation steps defined by senior engineers. 

• Follow established runbooks and procedures for incident response and request enhancements when gaps are identified. 

Cloud and infrastructure security 

• Help configure and monitor security controls in Azure and AWS (e.g., security center, logging, IAM, security groups, baseline configurations). 

• Work with IT teams to ensure logging, alerting, and basic hardening are in place for servers, applications, and network devices. 

• Assist with periodic reviews of access controls, MFA configurations, and conditional access policies across cloud and onprem environments. 

• Support vulnerability management activities by collecting scan results, tracking remediation status, and validating fixes with relevant teams. 

Endpoint and identity security 

• Help manage endpoint security tools (EDR/AV, disk encryption, device posture checks) and respond to endpoint alerts following documented procedures. 

• Assist with implementation and maintenance of identity and access controls (e.g., rolebased access, privilege reviews, account lifecycle processes). 

• Contribute to standard build/hardening checklists for laptops, servers, and cloud resources, and verify that new systems are deployed according to these baselines. 

Operational processes and documentation 

• Maintain up to date technical documentation for security tools, dashboards, playbooks, and standard operating procedures. 

• Support periodic security reviews and audits by gathering evidence, screenshots, and exportable reports from security tools. 

• Help implement and track security metrics (e.g., number of alerts, mean time to acknowledge, patch/vulnerability closure rates) and suggest improvements. 

• Assist with user onboarding/offboarding tasks related to security access, device setup, and security tooling enrollment. 

Collaboration and learning 

• Partner with the IT teams to ensure changes to infrastructure or applications include appropriate logging and security controls. 

• Stay current on security tooling and best practices relevant to SIEM, cloud security, and endpoint protection, and share useful findings with the team.  

Job Qualifications 

• Bachelor’s degree in technical, information security, or related discipline, or equivalent practical experience. 

• 2-6 years of relevant security experience. 

• Strong technical aptitude with interest in security operations, cloud security, and endpoint protection. 

• Comfortable working with logs, dashboards, and basic scripting or automation tools to troubleshoot and analyze issues. 

• Security+, CySA+, AWS Associate Certifications, AZ 500 or other information security certifications. 

• Demonstrates strong problem solving, analytical, interpersonal, and ownership skills. 

• Possesses excellent collaboration skills for work with various internal team members. 

Additional Skills/Experience 

• An understanding of security concepts, encryption, system hardening, defense-in-depth designs, advanced persistent threats, anomaly detection and next-generation technologies. 

• Working knowledge and experience with any of the following technologies: VA, SIEM, DLP, IPS/IDS, AV, MFA, VPN, FW, AD, Wireless, ACL’s, & Port Scanning. 

• Experience with Rapid7 SIEM is a plus, experience with any log analysis or SIEM platform is a must. 

• Working knowledge of Windows endpoints; familiarity with macOS or basic networking concepts is a plus. 

• Awareness of security frameworks or standards (e.g., ISO 27001, NIST CSF) and interest in learning how they apply in practice. 

• Knowledge of a variety of security tools.