SecOps Engineer - North Central region (Remote in the U.S.)
Core
Implement, optimize, and support security operations technologies and workflows, focusing on SIEM platforms, detection engineering, and security telemetry for client engagements.
Role type
SecOps Engineer (SIEM & Detection Engineering)
Builds
Security telemetry pipelines, detection rules, and SOC optimization strategies for client organizations
Domain
Cybersecurity / Security Operations Center (SOC)
Deliverable
production ML models | product features | dashboards & analysis | client delivery
Required skills
SIEM platform configuration, log data ingestion, detection rule development, data normalization, SOAR playbook maintenance, technical troubleshooting, documentation
Preferred skills
MITRE ATT&CK mapping, data quality assurance, automation scripting, emerging AI tools adoption
Technologies
Splunk, Google SecOps, Elastic, Cribl, Onum, Databahn, Dynatrace, Datadog, XSOAR, Fusion, SentinelOne HyperAutomation, Torq, Tines
Responsibilities
Configure and support security telemetry ingestion into SIEM platforms; Develop and tune detection rules within SIEM platforms; Support configuration and maintenance of SIEM platforms; Assist in the development and maintenance of SOAR playbooks; Participate in client interviews and technical discovery sessions for security architecture reviews; Monitor data pipelines and identify ingestion or processing failures
Seniority
Mid-level, hands-on IC