IS Security Operations Senior Engineer HQ

Description

• Integrate security tools with ticketing, orchestration, and reporting platforms to support efficient SOC operations.
• Engineer detection rules, correlation logic, and automation workflows to identify threats with high fidelity and minimal false positives.
• Partner with SOC analysts to understand investigation workflows and develop supporting detection and response capabilities.
• Design, implement, and maintain SIEM, EDR, and cloud-native monitoring solutions for enterprise and hybrid environments.
• Provide technical guidance during threat hunting exercises and proactive security assessments.
• Contribute to documentation, architecture diagrams, and configuration baselines for all SOC technologies.
• Conduct root cause analysis of security incidents and recommend long-term preventive controls.
• Maintain awareness of evolving attack techniques and translate them into actionable detection logic using frameworks such as MITRE ATT&CK.
• Collaborate with infrastructure, application, and cloud teams to embed security monitoring and logging requirements into system designs.
• Mentor junior engineers and analysts on detection engineering and SOC tool best practices.
• Develop playbooks and scripts to automate common triage and containment actions.
• Evaluate and implement security tool enhancements, tuning strategies, and technology upgrades.
• Present and lead the implementation of new tools, skills and capabilities to improve SOC operations.
• Lead technical efforts in the containment, eradication, and recovery phases of major incidents.

Requirements

• Excellent communication and collaboration skills with both technical and non-technical stakeholders.
• Strong hands-on experience with SIEM platforms, EDR solutions, and cloud monitoring technologies.
• Familiarity with Microsoft security solutions, including Defender, Sentinel, and Intune, preferred but role remains tool-agnostic.
• Certifications such as SC-200, GCDA, GCIH, CISSP, or similar preferred.
• Strong understanding of logging, event correlation, and security architecture principles.
• Experience applying MITRE ATT&CK framework to detection engineering and incident response.
• Demonstrated ability to lead technical incident response efforts under pressure.
• Proficiency in writing and tuning detection rules, automation workflows, and custom scripts.
• Bachelor’s Degree in Cybersecurity, Computer Science, Information Systems, or related technical field; or equivalent combination of education, training, and experience.
• Minimum of 5–7 years of experience in security engineering, detection engineering, or SOC operations with a technical focus.

Benefits

• Limited travel

Training + Development

Interview process

Visa Sponsorship

Security clearance