Our Opportunity:

We are seeking a highly motivated Information Security Operations Engineer II in Boston, MA. The SOC Engineer is a cross functional role at Chewy working in tandem between the Security Engineering and Security Architecture teams.  This role will have a strong focus in Threat Hunting, Incident Handling and Response.  The ideal candidate will assist in the planning, design, build and support of the information security infrastructure at Chewy.com.

What You’ll Do:

• Evaluate and recommend new and emerging security products and practices within the industry
• Will be involved in system design, testing, evaluation and implementation of security platforms and practices
• Contributes to tool optimization and automation initiatives to streamline responses and workflows
• Assess, triage and prioritize security alerts from logging and monitoring systems
• Bring all our security relevant data together to allow for full situational awareness
• Apply critical thinking to remediate threats based on threat intelligence as well as active analysis of log data
• Define processes and maturing playbooks of operational response to incidents
• Provide support to other IT teams in malware remediation, mitigation of network and web-based attacks and implementing proactive security controls into systems
• Participate in a 24/7 operation that looks after and responds to security events on or against Chewy networks
• This roll is considered a night shift role and will adhere to the following schedule:
  • Sunday – Wednesdays
  • 11pm – 9am

What You’ll Need:

• Security industry certifications (CISSP, SANS or others) a plus
• Strong understanding of TCP/IP and other networking principles
• Experience with endpoint forensics, malware remediation and advanced attack detection.
• Understanding on how to secure key IT technologies including Windows, Linux, Databases, Web Servers and others
• Experience with SIEM & SOAR related technologies and fundamentals
• Experience with Vulnerability Management and risk reduction plans
• Experience with DDos mitigation and preventing Layer-7 Web based attacks
• Experience with securing e-commerce applications and support infrastructure
• A high drive and passion to understand, pick apart and improve processes, technology and data
• Must be able to work well with a highly passionate and energectic team in a collaborative environment
• Ability to generate security metrics and reporting on incidents and effectiveness of controls
• Able to produce security assessments of events, applications and infrastructure to IT teams
• Position may require travel

If you have a disability under the Americans with Disabilities Act or similar law, or you require a religious accommodation, and you wish to discuss potential accommodations related to applying for employment at our company, please contact [email protected].

To access Chewy’s Privacy Policy, which contains information regarding information collected from job applicants and how we use it, please click here: Chewy Privacy Policy.

Chewy is committed to equal opportunity. We value and embrace diversity and inclusion of all Team Members. If you have a disability under the Americans with Disabilities Act or similar law, or you require a religious accommodation, and you wish to discuss potential accommodations related to applying for employment at Chewy, please contact [email protected]. To access Chewy’s Privacy Policy, which contains information regarding information collected from job applicants and how we use it, please click here: https://www.chewy.com/app/content/privacy).