Security Engineer
Core
Build, operate, and improve a modern Security Operations Center (SOC) using automation, agentic workflows, AI-assisted investigation, and security engineering practices.
Role type
Mid-level Security Engineer (SOC & Detection)
Builds
Automated security workflows, detection rules, log ingestion pipelines, and agentic SOC capabilities
Domain
Cloud Security / Cybersecurity / AI-assisted Operations
Required skills
Python, AWS, SIEM, Log Pipelines, Detection Engineering, Incident Response, Cloud Security, Automation
Preferred skills
Agentic/AI Security, Sigma/SPL/KQL/SQL/YARA, Infrastructure as Code (Terraform/CDK)
Technologies
AWS, Python, SIEM, Terraform, CloudFormation, CDK, LLMs, AI Agents
Responsibilities
Build and maintain security workflows and integrations; Develop and tune detection rules and alert logic; Design and troubleshoot log ingestion flows; Write Python scripts for automation and enrichment; Analyze and correlate security alerts; Support incident response and post-incident improvements; Collaborate with engineering and cloud teams.
Seniority
Mid-level, hands-on IC
