Resident Engineer

Jobgether

1d•$135,000 - $145,000•Remote

About The Position

This role provides advanced endpoint protection and cloud security expertise, supporting customers across AWS, Azure, and GCP environments. You will be responsible for incident response, threat hunting, SOC operations, Splunk log parsing, XDR deployment, and security monitoring. The position requires hands-on troubleshooting, scripting (Python/PowerShell), Linux administration, and networking knowledge to optimize security solutions. You will collaborate with product, engineering, and customer teams to ensure deployments are operational, secure, and delivering maximum value. This is a customer-facing role that blends technical mastery with proactive guidance, enabling clients to adopt and expand usage of security solutions. It offers the chance to work in a dynamic, multi-cloud environment while growing your expertise in advanced cybersecurity operations.

Requirements

10+ years of relevant professional experience in cybersecurity, endpoint protection, or cloud security.
Hands-on experience as a Security Incident Responder, SOC analyst, or SOC manager.
Familiarity with AWS, Azure, and GCP cloud platforms and associated use cases.
Strong networking knowledge (TCP/IP, OSI model) and troubleshooting experience.
Expertise in log ingestion, Splunk SIEM, XDR deployment, and alert tuning.
Experience in scripting/automation with Python or PowerShell; knowledge of SQL, XQL, or other query languages preferred.
Basic Linux administration and troubleshooting skills.
Excellent communication skills and ability to work independently and collaboratively.
U.S. citizenship required due to government contract.

Responsibilities

Provide endpoint protection support, including incident response, threat hunting, and SOC activities.
Deploy, operationalize, and troubleshoot XDR solutions across AWS, Azure, and GCP.
Parse, analyze, and monitor logs using Splunk and related tools to detect and respond to threats.
Develop scripts and automation using Python or PowerShell to enhance operational efficiency.
Provide technical guidance, enablement, and best practices to customers and internal teams.
Collaborate with product and engineering teams to act as a subject matter expert (SME) for security solutions.
Support networking and cloud security troubleshooting, including TCP/IP and OSI model analysis.
Tune alerts, develop custom BIOCs, correlation rules, and optimize log ingestion for XDR.