Security Operations Engineer

Job Summary

To support the ongoing transformation of the organization's Security Operations & Incident Response program, the contracted Security Operations Engineer will drive operational delivery excellence, conduct deep dive investigations, and develop incident response playbooks while working remotely from the USA or Canada.

Key responsibilities

• Provide expert-level support for digital forensics investigations, including memory, network, and malware analysis
• Author and refine incident response playbooks and operational guidelines to adapt to evolving cybersecurity threats
• Design and implement complex detection rules and automated remediation workflows to identify and mitigate adversarial behavior

Required qualifications

• Bachelor's degree and 5+ years of relevant experience in incident response and SOC tooling
• In-depth knowledge of SIEM/SOAR platforms and incident response processes in hybrid cloud environments
• Experience leading incident response as incident commander and performing root cause analysis
• Familiarity with scripting languages such as Python, PowerShell, Bash, or XQL
• Understanding of regulatory compliance frameworks like MITRE ATT&CK, NIST, or ISO