Sr. Security Engineer - SOC Operations

📋 Description

• Security monitoring and alert triage: review SIEM/EDR alerts and prioritize incidents.
• Incident response and containment: investigate incidents, isolate systems, eradicate threats.
• Threat detection and use-case tuning: create and tune detection rules to reduce false positives.
• Threat intelligence ingestion and analysis: consume intel feeds and operationalize detections/blocks.
• Endpoint security operations: manage EDR agents, respond to endpoint alerts, live response/forensics.
• Identity and access monitoring: detect suspicious logins, privilege escalation, lateral movement.

🎯 Requirements

• Bachelor's degree in CS/Info Security; advanced degree preferred.
• Minimum 8 years of experience in information security focusing on SOC, IR, and threat hunting.
• Knowledge of MITRE ATT&CK, NIST SP 800-61, and other security frameworks.
• Extensive experience with SIEM and EDR platforms; log ingestion and detection tuning.
• Cloud experience with AWS; GuardDuty, CloudTrail, Security Hub; cloud threat investigations.
• Experience developing Incident Response playbooks, runbooks, and SOPs.
• Strong communication and analytical skills; forensics and root-cause analysis.
• Certifications such as CompTIA Security+, CISSP, AWS Security - Specialty are desirable.