Security Engineer - SIEM/SOAR - Northeast region
Core
Architect, deploy, and maintain SIEM platforms and build SOAR playbooks to detect, investigate, and respond to cybersecurity threats for Fortune 500 and government clients.
Role type
Senior Security Engineer (SIEM/SOAR)
Builds
Security telemetry pipelines, detection content, automation playbooks, and SOC dashboards
Domain
Cybersecurity / Security Operations Center (SOC)
Required skills
SIEM architecture and tuning, SOAR playbook development, log ingestion strategies, detection rule creation, API integration, scripting (Python/BASH/Perl), cloud security (AWS/Azure/GCP), OS troubleshooting (Windows/Linux/Mac)
Preferred skills
Infrastructure as Code (Terraform/Ansible), EDR/Endpoint security, security runbook authoring
Technologies
Splunk, Microsoft Sentinel, CrowdStrike, Elastic, Google SecOps, Palo Alto XSOAR, Tines, ServiceNow, Jira
Responsibilities
Architect and maintain SIEM platforms including data ingestion and normalization; Develop and tune detection rules mapped to MITRE ATT&CK; Design and maintain SOAR playbooks for incident response; Integrate security tools via APIs; Build dashboards for SOC operations and compliance; Collaborate with SOC analysts to implement new detections
Seniority
Mid-Senior, hands-on IC
