Security Operations Engineer, Associate - Security Operations Engineering
Core
Associate Security Operations Engineer providing SIEM, automation, and security platform engineering support for cross-functional security needs, incident response, and asset observability.
Role type
Associate Security Operations Engineer (SIEM/SOC)
Builds
Security information and event management (SIEM) systems, Security Orchestration, Automation, and Response (SOAR) workflows, and cloud security infrastructure.
Domain
Financial Services / Cybersecurity
Deliverable
production ML models | product features | dashboards & analysis | infrastructure
Required skills
SIEM (Splunk), SOAR, Python/PowerShell scripting, Infrastructure-as-Code (Terraform), Cloud native architectures (AWS/Azure), CI/CD systems, Container orchestration (Kubernetes/ECS), Asset hardening (CIS/STIG), Endpoint Detection and Response
Preferred skills
Tier 3 security investigations, Forensics and analytics
Technologies
Splunk, Terraform, AWS, Azure, Office 365, Jenkins, Gitlab, Kubernetes, AWS ECS
Responsibilities
Designing and customizing complex SIEM search queries, dashboards, and advanced searching; Design and develop SOAR automations; Develop and document configuration standards, policies, and procedures; Perform as technical lead in custom content and system integration; Leverage infrastructure-as-code frameworks to provision and maintain cloud resources; Design, build, and maintain critical security-related systems for CI/CD and secrets management
Seniority
Associate, hands-on IC