Security Engineer
About The Position
The Security Engineer is a hands-on technical contributor within a 24/7 Security Operations Center (SOC), executing detection, investigation, and response capabilities. The role builds AI-powered workflows, engineers detection content, and supports operational excellence in a SOX-regulated, SOC 2 Type 2 certified environment. The position also maintains the SOC technology stack and audit-ready evidence, and partners with IT, Cloud, Risk, and Compliance to improve telemetry and communicate findings. The work takes place in an office environment with an open seating floor plan, frequent interruptions, and regular use of a computer, telephone, and other office equipment. The employee is regularly required to sit, talk, or hear.
Requirements
- Bachelor’s degree in computer science, Cybersecurity, or a related field, or equivalent practical experience.
- At least 4 years of hands-on experience in security operations, incident response, or threat detection.
- Deep expertise with SIEM, SOAR, EDR/XDR, detection engineering, and incident response.
- Experience writing SOAR playbooks and detection rules or queries in a major SIEM platform.
- Experience operating in SOX and SOC 2 Type 2 environments, including control evidence and audit support.
- Hands-on experience applying AI/LLMs to security operations or detection and response.
- Strong attention to detail and ability to communicate technical concepts clearly to technical and non-technical stakeholders.
- Proactive, self-motivated, results-driven mindset.
- Ability to thrive in a fast-paced, collaborative, team-oriented environment.
- Excellent written and verbal communication skills.
- Passion for continuous learning and staying current with emerging technologies.
Responsibilities
- Triage, investigate, and respond to alerts across the SOC queue, meeting SLAs and following playbooks.
- Lead incident investigations, gather evidence, correlate events, and coordinate containment and recovery.
- Build and tune AI-assisted and agentic workflows across SIEM, SOAR, and EDR, including Claude via API.
- Engineer detection rules, queries, and alert tuning mapped to MITRE ATT&CK.
- Write and maintain SOAR playbooks and automation scripts to reduce manual work and accelerate response.
- Proactively hunt for threats by forming and testing hypotheses against current adversary TTPs.
- Maintain integrations, health, and content engineering across the SOC technology stack.
- Maintain audit-ready SOX and SOC 2 Type 2 evidence, including logging coverage, incident records, and procedures.
- Partner with IT, Cloud, Risk, and Compliance to embed telemetry and communicate findings clearly.
Benefits
- Bonus based on a combination of personal and business performance.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
