Operations Engineer

Job Summary

To enhance detection and response capabilities, the full-time remote Operations Engineer will tune EDR, SIEM, and security monitoring platforms, ensuring high-quality alerts and effective communication with security teams regarding real threats.

Key responsibilities

• Tune EDR, SIEM, and XDR detections to improve alert quality and reduce false positives
• Build and maintain detection rules, dashboards, and response workflows based on threat intelligence and incident findings
• Support SOC analysts by providing clear alert descriptions, triage steps, and escalation guidance

Required qualifications

• Experience tuning EDR, SIEM, or XDR monitoring platforms
• Strong understanding of attack behaviors across endpoint, identity, cloud, and network
• Practical experience writing detection logic in languages such as KQL, SPL, or Sigma
• Familiarity with MITRE ATT&CK mapping and detection coverage analysis
• Strong scripting ability in Python, PowerShell, or Bash