Security Operations Center Engineer

What you'll do

• Manage and optimize SIEM platforms for ingestion, parsing, correlation, and performance.
• Build and tune high-quality detections across various security environments.
• Improve signal quality by reducing false positives and expanding detection coverage.
• Translate threat intelligence into actionable detections to enhance security outcomes.
• Develop automation and orchestration for triage, investigation, and remediation processes.
• Integrate security tools and data sources into a unified detection ecosystem.

What we're looking for

• 4+ years of information security experience with hands-on SIEM tool administration and configuration.
• Expertise in building high-quality detections across multiple environments including SIEM, EDR/XDR, cloud, identity, and network.
• Broad understanding of security practices such as risk management, threat analysis, auditing, monitoring, and incident response.
• Working knowledge of cloud computing, network protocols, and common information security standards/frameworks.
• CYSA+, GCIH, GCIA, OSCP, CISSP or similar certification required.