Senior SOC Engineer

Western Governors University•Raleigh, NC

1d•$127,700 - $191,500•Onsite

About The Position

Our Security Operations Center (SOC) team is responsible for a broad range of security operations, including monitoring, incident response, risk assessment, policy development, audit and compliance, technical operations, and collaboration across departments. This team plays a critical role in safeguarding WGU’s systems and data while driving innovation and collaboration across the organization. As a Senior SOC Engineer, you will lead advanced security monitoring and incident response efforts, ensuring WGU maintains a strong and resilient security posture. You’ll work on cutting-edge technologies, collaborate with cross-functional teams, and help shape the future of our security operations.

Requirements

5+ years in security operations (10+ years earns bonus consideration)
Hands-on SIEM expertise — content development, not just querying
Experience with CrowdStrike or Carbon Black (EDR), Mimecast, and vulnerability management tools
Working knowledge of the MITRE ATT&CK framework and cloud security principles
Python or Bash scripting for automation and workflow improvement
Strong communicator who can brief leadership and work across non-security teams
Bachelor's degree in IT Security, Computer Science, or related field — or equivalent experience

Nice To Haves

CISSP, GIAC, CCSP, or AWS Security Specialty
SOAR experience
Cloud-native security tooling
Experience in Lieu of Education: Equivalent relevant experience may substitute for educational requirements at the hiring manager’s discretion.

Responsibilities

Perform advanced threat detection, analysis, and response across multiple platforms and environments
Lead investigations into security incidents and coordinate remediation efforts
Develop and tune SIEM content, alerts, and dashboards to improve detection capabilities
Monitor endpoint and network security tools to identify anomalies and enforce security policies
Collaborate with engineering and IT teams to implement secure configurations and best practices
Research emerging threats and recommend innovative solutions to strengthen security posture
Support compliance initiatives and contribute to security audits and risk assessments
Advanced threat detection, triage, and response across multi-platform environments
Lead security incident investigations and drive remediation to closure
Build and tune SIEM content, alerting rules, and detection dashboards
Monitor EDR and network tools for anomalies and enforce security policy
Collaborate with engineering to harden configurations and implement secure design
Threat hunting, vulnerability management, and emerging threat research
Support audits, compliance initiatives, and risk assessments