Hiring: Associate Solution Consultant – Security Incident Handler Company: Trellix Location: Irvine, CA Job Posted Time: 2026-09-15 14:43:13 Employment Type: Full-time / Remote Target Skills & Keywords : AI, AWS, Azure, C#, Linux, Microsoft Excel, Microsoft Office, Microsoft PowerPoint, Perl, PowerShell, Project Management, Python, SIEM, Shell, TCP/IP About the job Experience: •3 to 4 years’ experience in Information Security, including operational security monitoring or incident response. •4 years’ experience in Information Security, including operational security monitoring or incident response. Required Skills: •Trellix Professional Services is seeking a Security Incident Handler with a passion for Cyber Security Defense and a strong understanding of security monitoring and incident response. •We have an onsite Elite team—one of the best Cyber Security consulting teams—working directly with our strategic customer as a joint Security Operations Task Force, and growing this piece of the business is a top priority! •Note: This position may require occasional after-business-hour and weekend on-call shifts. •Manage and perform client work related to our product service offerings, security monitoring, and incident response. •Act as an integral member of the joint Security Operation Task Force and CSIRT team in a 24x7x365 operations environment. •Respond to security incidents in a production environment, including investigating/remediating endpoint malware infections and mitigating email-borne threats (phishing/spam). •Conduct host and network forensics during security incidents, analyzing system artifacts (file system, memory, running processes, network connections) for indicators of compromise (IOCs). •Identify and mitigate vulnerabilities using alternate or compensating controls where necessary. Qualifications: •Understanding of cyber threats, attack vectors, detection capabilities, incident management processes, and compensating security controls. •Monitoring and log analysis across Network/Host IDSs, UEBA, WAFs, Database Security, Firewalls/Routers/Switches/VPNs, File Integrity Monitoring (FIM), Active Directory, and OS logs. •Host and network forensics capabilities, system artifact analysis, and threat hunting methodologies. •Basic technical understanding of the MITRE ATT&CK™ framework and MITRE’s Ten Strategies of a World-Class Cybersecurity Operations Center. •Knowledge of TCP/IP protocol suites (packet/traffic dissection) and OS logging configuration (Syslog, flat-files). •Operational familiarity with Windows, Mac, and Linux OS administration, application hardening, and security controls. Compensation: •Medical, Dental and Vision Coverage Interested candidates, please apply directly through the job posting on company's career page or try via AI auto apply on this platform. Don't miss this opportunity to join a forward-thinking team!