Perform advanced threat detection, analysis, and response across multiple platforms and environments
Lead investigations into security incidents and coordinate remediation efforts
Develop and tune SIEM content, alerts, and dashboards to improve detection capabilities
Monitor endpoint and network security tools to identify anomalies and enforce security policies
Collaborate with engineering and IT teams to implement secure configurations and best practices
Research emerging threats and recommend innovative solutions to strengthen security posture
Support compliance initiatives and contribute to security audits and risk assessments

5+ years in security operations (10+ years earns bonus consideration)
Hands-on SIEM expertise — content development, not just querying
Experience with CrowdStrike or Carbon Black (EDR), Mimecast, and vulnerability management tools
Working knowledge of the MITRE ATT&CK framework and cloud security principles
Python or Bash scripting for automation and workflow improvement
Strong communicator who can brief leadership and work across non-security teams
Bachelor's degree in IT Security, Computer Science, or related field — or equivalent experience

Senior SOC Engineer

Key skills