Security Operations Engineer

Job Summary

Working remotely on a full-time basis, the Security Operations Engineer will triage, investigate, and respond to security alerts while continuously improving detections and automations to enhance the organization's security posture.

Key responsibilities

• Triage, investigate, and respond to security alerts across endpoints, cloud infrastructure, and network telemetry
• Automate repetitive workflows and utilize AI to enhance speed, scale, and effectiveness in security operations
• Execute containment and remediation actions for confirmed incidents, continuously improving established runbooks

Required qualifications

• 3+ years of experience in security operations, detection and response, or a related security engineering role
• Experience investigating and responding to security threats across endpoints, cloud environments, and network telemetry
• Hands-on experience with SIEM and EDR platforms, including tuning detections to improve signal quality
• Ability to apply threat intelligence, including IOCs and TTPs, to investigations and proactive monitoring
• Prepared to participate in an on-call rotation and document incidents clearly for continuous improvement