SOC Engineer

Bayview Asset Management•Coral Gables, FL

3h•Remote

About The Position

The Bayview Security Operations Center (SOC) is looking for a seasoned professional to join our enthusiastic, innovative, and results driven team. The Senior Associate Security Operations Center (SOC) Engineer will manage security tools and automate processes to support the SOC. This role requires strong technical skills, curiosity, critical thinking, and a solid understanding of security tools and processes.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field. Equivalent work experience may be considered in lieu of degree.
10+ years of security engineering experience
Extensive Splunk administration experience is required
Experience with SOAR platforms is required.
Experience managing EDR platforms is required.
Experience with Python and PowerShell is required
Linux administration experience is required
Strong problem-solving and analytical skills, with a focus on innovation and efficiency

Nice To Haves

Splunk certifications are desired
Splunk SOAR (Phantom) is preferred.
SentinelOne is preferred.
Experience with Azure and AWS is preferred
One or more of the following certifications is preferred: Splunk Cloud Certified Admin, Splunk Enterprise Certified Admin, Splunk Enterprise Certified Architect, Splunk Enterprise Security Certified Admin, Splunk SOAR Certified Automation Developer, Splunk Certified Cybersecurity Defense Engineer

Responsibilities

Install and maintain Splunk SIEM and SOAR infrastructure
Configure log collection from on-prem and cloud infrastructure
Manage Crowdstrike EDR and other SOC tools
Integrate various security tools and platforms to ensure seamless data flow and enable the automation of SOC processes
Configure Azure and AWS incident response infrastructure
Create and maintain documentation for all security tools
Participate in proof-of-concept testing and implementation of new solutions
Work closely with SOC analysts to identify opportunities for automation and improve overall SOC performance.
Provide training and support to SOC analysts on the use of security tools and scripts
Stay current with the latest security tools, automation techniques, and best practices to continually enhance SOC operations