Security Operations Engineer

Job Summary

To support the ongoing transformation of the organization's Security Operations & Incident Response program, an experienced Engineer - SOC & IR will work remotely on a contracted basis, focusing on deep dive investigations, authoring incident response playbooks, and developing threat models to enhance cybersecurity resilience.

Key responsibilities

• Provide expert-level support for digital forensics investigations, including memory, network, and malware analysis
• Author and refine incident response playbooks and operational guidelines to adapt to evolving threats
• Design and implement complex detection rules and automated remediation workflows to identify adversarial behavior

Required qualifications

• Bachelor's degree and 5+ years of relevant experience in incident response and SOC tooling
• In-depth knowledge of SIEM/SOAR platforms and incident response processes in hybrid cloud environments
• Experience leading incident response as incident commander and performing root cause analysis
• Familiarity with scripting languages such as Python, PowerShell, Bash, or XQL
• Understanding of regulatory compliance frameworks such as MITRE ATT&CK, NIST, or ISO