Sr. MSIAM SOC Engineer (Unit 42)
About The Position
The Sr. MSIAM SOC Engineer (Unit 42) drives continuous refinement of correlation rules and ensures deployed detection logic meets strict standards for performance, accuracy, and operational relevance. The role translates Unit 42 threat intelligence research and emerging adversary tactics, techniques, and procedures into actionable detection logic, and proactively engineers automation playbooks to address emerging security challenges and optimize workflows. The position architects the end-to-end security lifecycle within Cortex XSIAM, connecting data ingestion, detection engineering, and response automation. It is remote, with hybrid teams collaborating across geographies.
Requirements
- At least 5 years of hands-on experience in a Senior SOC, Detection Engineering, or Security Architecture role using SIEMs, firewalls, EDR, sandboxes, and SOAR platforms.
- Mastery of the Detection Engineering lifecycle, including rule testing frameworks, soft-deployment strategies, and continuous tuning.
- Experience reviewing and quality-assuring others’ detection logic and providing constructive optimization feedback.
- A proactive engineering mindset and a track record of designing complex automation playbooks, such as with Cortex XSOAR or similar platforms, based on anticipated threat vectors.
- Strong background in incident response and threat hunting, including translating threat intelligence into actionable defense mechanisms.
- Software development experience and strong proficiency in Python for security automation.
- Exceptional consultative and communication skills, including the ability to guide enterprise customers through complex architectural and workflow decisions.
Nice To Haves
- Previous experience with Cortex XSIAM.
Responsibilities
- Refine correlation rules and ensure deployed detection logic meets standards for performance, accuracy, and operational relevance.
- Translate Unit 42 threat intelligence research and emerging adversary TTPs into actionable, robust detection logic.
- Develop proactive automation playbooks to address emerging security challenges and optimize operational workflows.
- Architect the security lifecycle within Cortex XSIAM, connecting data ingestion, detection engineering, and response automation.
- Review and quality-assure detection logic written by others and provide constructive optimization feedback.
- Guide enterprise customers through complex architectural and workflow decisions.
Benefits
- Compensation may include restricted stock units and a bonus.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
