Senior Security Engineer, Detection & Response (SOC)

PrizePicks•Atlanta, GA

6d•$160,000 - $175,000•Remote

About The Position

PrizePicks is seeking a seasoned SOC engineer to help mature its Information Security detection, incident response, and forensics capabilities. This hands-on role spans monitoring, triage, response, and forensics, with ownership over the evolution of the program. The engineer will lead detection and monitoring improvements, incident response playbooks, threat hunting, forensics capability, response automation, incident handling, post-incident reviews, and program metrics and priorities.

Requirements

At least 5 years in a SOC, incident response, or detection engineering role, with demonstrated ownership of an incident response or monitoring program beyond queue work.
Experience building or significantly maturing a SOC or incident response function from an early-stage program to production-ready.
Strong grasp of the incident response lifecycle: preparation, detection, containment, eradication, recovery, and lessons learned.
Hands-on SIEM experience with log ingestion, correlation rules, detection tuning, and content development; platform-agnostic experience is acceptable.
Experience with forensic analysis and evidence handling across host and cloud environments.
Digital forensics fundamentals, including host, network, and/or cloud evidence collection and analysis.
Ability to build scripting or automation for triage and response workflows using Python or similar.
Working knowledge of at least one major cloud provider: AWS, GCP, or Azure.
Familiarity with MITRE ATT&CK and common threat actor tactics, techniques, and procedures.
Ability to define risk in technical and business-relevant terms.
Clear written communication skills for producing playbooks and incident documentation.
Authorization to work for any employer in the U.S.; visa sponsorship is not available.

Nice To Haves

Relevant certifications such as GCIH, GCFA, GCIA, OSCP, or equivalent.
Experience with a SOAR platform.
Prior experience in fintech, gaming, or another high-fraud-risk industry.
Experience running detection and incident response in a distributed or remote workforce, relying on endpoint and identity signals rather than a centralized network perimeter.

Responsibilities

Own monitoring and triage of events and alerts ingested into the SIEM, tuning detection content, reducing false positives, and closing coverage gaps.
Lead the design and continuous improvement of incident response playbooks.
Lead the threat hunting practice to identify malicious or anomalous activity not caught by alerts or automated detection.
Strengthen digital forensics processes and tooling, including investigation and evidence handling.
Drive automation for alerting, enrichment, and triage workflows to reduce manual effort and response time.
Respond to and lead incident response, coordinating with business partners as needed.
Document incidents, root causes, and remediation clearly and rigorously.
Build a structured, blameless post-incident review process, conduct root-cause analysis, and track action items through completion.
Develop how the program measures and scales, including incident response metrics, escalation paths, and priorities.

Benefits

Company-subsidized medical, dental, and vision plans.
401(k) plan with company match.
Annual bonus.
Flexible PTO; two weeks is strongly encouraged.
Generous paid leave programs, including 16-week paid parental leave and disability benefits.
Workplace flexibility and modern work schedules focused on getting the job done, not hours clocked.
Company-wide in-person events and team outings.
Lifestyle enhancement program.
Company equipment provided, with Windows and Mac options.
Annual performance reviews with opportunities for growth and career development.