Security Engineer

Job Summary

Seeking a full-time remote Security Engineer with over 4 years of security operations experience, who will manage detection, investigation, and response capabilities within a 24/7 Security Operations Center (SOC), while building AI-powered workflows and engineering detection content in a SOX-regulated, SOC 2 Type 2 certified environment.

Key responsibilities

• Triage, investigate, and respond to alerts across the SOC queue, adhering to SLAs and playbooks
• Lead incident investigations, gather evidence, and coordinate containment and recovery efforts
• Build and tune AI-assisted workflows across SIEM, SOAR, and EDR platforms, including writing and maintaining SOAR playbooks

Required qualifications

• Bachelor's degree in computer science, Cybersecurity, or a related field (or equivalent practical experience)
• 4+ years of hands-on experience in security operations, incident response, or threat detection
• Deep expertise with SIEM, SOAR, EDR/XDR, and incident response
• Experience writing SOAR playbooks and detection rules in a major SIEM platform
• Hands-on experience applying AI/LLMs to security operations or detection and response