Security Operations Expert

Fortinet•Sunnyvale, CA

7h•$92,000 - $112,000•Onsite

About The Position

Join Fortinet, a cybersecurity pioneer with over two decades of excellence, as we continue to shape the future of cybersecurity and redefine the intersection of networking and security. At Fortinet, our mission is to safeguard people, devices, and data everywhere. We are seeking a dynamic and highly skilled Security Operations Expert to join our SOC team, responsible for the security monitoring and management systems. This role encompasses incident response, vulnerability management, and system administration of critical security tools. The ideal candidate will also fine-tune detection rules to enhance the effectiveness of incident detection and response workflows.

Requirements

Bachelor’s degree in Computer Science, Cybersecurity, or a related field (or equivalent experience).
5+ years of experience in security operations, incident response, or vulnerability management.
Hands-on experience administering and configuring security tools such as FortiSOAR, FortiSIEM, and FortiAnalyzer.
Strong understanding of detection engineering, fine-tuning alerting rules, and managing SIEM/EDR systems.
Proficiency in security frameworks (e.g., NIST, ISO 27001) and compliance standards.
Familiarity with scripting (e.g., Python, PowerShell) for task automation and tool customization.
Strong analytical and troubleshooting skills for rapid issue resolution under pressure.
Excellent communication skills, both written and verbal, for technical and executive audiences.
Must be authorized to work in the U.S. without sponsorship.

Nice To Haves

Understanding and building playbooks in SOAR in Json/Jinja experience is preferred.
Industry certifications such as CISSP, GIAC, CEH, or equivalent are highly preferred.

Responsibilities

Monitor and respond to security incidents in alignment with incident response protocols.
Conduct vulnerability assessments and manage remediation efforts.
Perform log analysis, host-based, and network forensic investigations to identify threats.
Administer and maintain security tools such as SOAR, SIEM, Anti-Virus, and similar platforms.
Fine-tune incident detection and alert-triggering rules to minimize false positives and improve detection accuracy.
Analyze and improve security measures by assessing and updating policies, configurations, and procedures.
Maintain situational awareness by tracking emerging threats, attack patterns, and tactics, techniques, and procedures (TTPs).
Develop comprehensive reports and presentations for both technical and non-technical audiences.
Contribute to the SOC’s continuous improvement by refining workflows, automation, and system integrations.