Mid-Level Security Platform Engineer - SIEM / SOAR
Core
Design, implement, maintain, and optimize enterprise SIEM, SOAR, and Identity Detection and Response capabilities to ensure reliable security monitoring, incident response, and threat hunting.
Role type
Mid-level security platform engineer (SIEM/SOAR/IDR)
Builds
Enterprise security detection and response platforms, automation workflows, and compliance reporting
Domain
Cybersecurity, Security Operations, Identity Security
Deliverable
production ML models | product features | dashboards & analysis | infrastructure
Required skills
SIEM administration, SOAR playbook development, Identity Detection and Response, data ingestion and normalization, alerting, case management, automation, scripting, API integration, search/query languages, compliance framework implementation
Preferred skills
User and Entity Behavior Analytics (UEBA), security analytics, identity threat detection, NIST guidelines, CIS Controls, ISO 27002, CMMC, FedRAMP, advanced analytics, data pipelines
Technologies
SIEM, SOAR, Identity Detection and Response platforms, automation tools, APIs, search/query languages
Responsibilities
Design, implement, maintain, and optimize enterprise SIEM, SOAR, and Identity Detection and Response capabilities; Support platform upgrades, configuration changes, integrations, and continuous improvement initiatives; Support audit and compliance activities by ensuring accurate logs, reports, and documentation; Create technical documentation, architecture diagrams, workflow diagrams, and leadership summaries; Mentor junior engineers or analysts on security detection platform capabilities and automation workflows
Seniority
Mid-level, hands-on IC