Security Engineer

2 days ago

Base Salary

$98k - $142k/yr

Responsibilities

Triage, investigate, and respond to SOC alerts while meeting SLAs and following playbooks.
Lead incident investigations, gather and correlate evidence, and coordinate containment and recovery.
Build and tune AI-assisted and agentic workflows across SIEM, SOAR, and EDR, including Claude via API.
Engineer detection rules, queries, and alert tuning mapped to MITRE ATT&CK.
Write and maintain SOAR playbooks and automation scripts to reduce manual effort and accelerate response.
Conduct proactive threat hunting based on current adversary TTPs.
Maintain SOC technology integrations, platform health, and detection content.
Maintain SOX and SOC 2 Type 2 audit evidence, including logging coverage, incident records, and procedures.
Partner with IT, Cloud, Risk, and Compliance teams to improve telemetry and communicate findings.

Bachelor’s degree in computer science, cybersecurity, or a related field, or equivalent practical experience.
At least 4 years of hands-on experience in security operations, incident response, or threat detection.
Deep expertise with SIEM, SOAR, EDR/XDR, detection engineering, and incident response.
Experience writing SOAR playbooks and detection rules or queries in a major SIEM platform.
Experience operating in SOX and SOC 2 Type 2 environments, including control evidence and audit support.
Hands-on experience applying AI or large language models to security operations or detection and response.
Strong written and verbal communication skills with technical and non-technical stakeholders.
Strong attention to detail, proactive work habits, self-motivation, and interest in continuous learning.

The role is based in an office environment with regular use of a computer, telephone, and other office equipment.
The position is eligible for a performance-based bonus.
Additional benefit information is provided through the employer’s careers page.

1,001-5,000 employees