Security Operations Engineer

Job Summary

Owning the daily operation and continuous improvement of Alpaca's SIEM and SOAR capabilities, the full-time remote Security Operations Engineer will onboard security logs, develop and tune detections, maintain operational dashboards, and automate response actions.

Key responsibilities

• Onboard new security log sources and ensure data quality through parsing and normalization
• Build, test, and tune detection rules based on threat intelligence and incident learnings
• Support security incidents by collecting evidence, running detection queries, and implementing containment actions

Required qualifications

• 3+ years of experience in Security Operations or detection engineering roles
• Hands-on experience operating and tuning a SIEM
• Experience building SOAR playbooks or equivalent response automation
• Strong alert investigation skills across identity, endpoint, network, and cloud environments
• Experience onboarding and parsing log sources from cloud, identity, and SaaS platforms