Design, implement, and continuously improve detection rules across SIEM, EDR, and cloud security platforms
Develop automated response playbooks to reduce mean time to detect (MTTD) and respond (MTTR)
Leverage GenAI tools to accelerate log analysis and threat triage
Summarize and enrich security alerts and incident data
Generate detection logic (e.g., Sigma rules, queries, scripts)
Assist in root cause analysis and investigation workflows
Integrate GenAI into SOC workflows via APIs and internal tooling
Enhance detection pipelines using AI-assisted enrichment and correlation
Analyze logs across endpoints, cloud environments, SaaS platforms, and networks

3–7+ years of experience in Security Engineering, Detection Engineering, or Incident Response
Hands-on experience with SIEM (e.g., Splunk, Datadog, Sentinel) and/or EDR platforms
Strong understanding of security fundamentals (networking, OS, cloud security, identity)
Experience with scripting or programming (Python preferred)
Proven experience using GenAI tools (e.g., Claude, Cursor, ChatGPT) in security workflows

Senior Security Operations Engineer

Key skills