Mid-Level Security Platform Engineer - SIEM / SOAR

Spirit AeroSystems•Wichita, KS

12d

About The Position

This role is at Spirit AeroSystems, Inc. a wholly owned subsidiary of The Boeing Company, supporting Spirit’s Commercial Business Units (“Spirit Commercial”). Spirit Commercial designs and builds commercial aerostructures, including for Boeing Commercial Airplanes, one of Boeing’s three business units and the premier manufacturer of commercial jetliners for decades. Spirit Commercial’s core products include fuselages, pylons, nacelles and wing components, with a focus on innovative composite and aluminum manufacturing solutions. The Security Platform Engineer III is responsible for the implementation, maintenance, optimization, and maturation of enterprise SIEM, SOAR, and Identity Detection and Response capabilities. This role ensures that security technologies supporting monitoring, incident response, threat hunting, detection engineering, automation, identity threat visibility, case management, reporting, and compliance are reliable, integrated, scalable, and aligned with program needs. This role is focused on platform strategy, technical enablement, data quality, integrations, automation, workflow improvement, operational readiness, and long-term maturity. The engineer enables analysts, responders, and threat hunters by improving security visibility, alert fidelity, response consistency, investigation speed, and technology-driven risk reduction through effective use of security detection and response platforms.

Requirements

Minimum 5 years of relevant cybersecurity, security engineering, security operations, incident response, detection engineering, automation, identity security, infrastructure, platform administration, or related experience.
Advanced cybersecurity, security engineering, security operations, automation, identity security, cloud, infrastructure, or platform certification. Degree may qualify in lieu of certification.
Hands-on experience administering, engineering, or supporting enterprise security monitoring, automation, detection, or response platforms.
Strong understanding of SIEM, SOAR, and Identity Detection and Response concepts, including data ingestion, normalization, enrichment, alerting, workflows, case management, automation, identity context, and reporting.
Strong documentation, troubleshooting, communication, stakeholder management, and technical coordination skills.

Nice To Haves

Bachelor’s degree in cybersecurity, information technology, computer science, engineering, or related field required.
Experience with enterprise SIEM, SOAR, User and Entity Behavior Analytics, security analytics, identity threat detection, or related security operations platforms.
Experience with SOAR playbook development, integrations, custom functions, enrichment workflows, case management, response automation, and approval workflows.
Familiarity with NIST guidelines, CIS Controls, ISO 27002, CMMC, FedRAMP, and/or other security and compliance frameworks.
Experience with scripting, automation, APIs, data pipelines, search or query languages, detection support, advanced analytics, dashboards, and reporting.

Responsibilities

Design, implement, maintain, and optimize enterprise SIEM, SOAR, and Identity Detection and Response capabilities.
Support platform upgrades, configuration changes, integrations, capability rollouts, application updates, content updates, and continuous improvement initiatives.
Support audit and compliance activities by ensuring required logs, reports, evidence, access records, and operational documentation are accurate and available.
Create technical documentation, architecture diagrams, workflow diagrams, operating procedures, readiness reports, metrics, and leadership summaries.
Mentor junior engineers or analysts on security detection platform capabilities, data usage, query practices, automation workflows, identity detection concepts, and security operations enablement.