Security Operations Engineer II
Core
Engineer-first member of a Security Operations Center monitoring, investigating, and responding to security events across corporate, cloud, and regulated SaaS environments.
Role type
Senior IC security operations engineer (SOC/detection)
Builds
Security automation playbooks, tool integrations, threat detections, and cloud infrastructure for security tooling
Domain
Cybersecurity, Cloud Security, Identity & Access Management
Required skills
Python, shell scripting, Git, incident response, alert triage, SIEM, SOAR, cloud platforms, identity providers, EDR, REST APIs, infrastructure-as-code, CI/CD pipelines
Preferred skills
None explicitly stated as preferred
Technologies
Python, Git, SIEM, SOAR, cloud platforms, identity providers, EDR, REST APIs, infrastructure-as-code, CI/CD
Responsibilities
Investigate and respond to security alerts and phishing tickets; participate in on-call rotation for escalated events; own incidents through closure and remediation; build automation to replace manual work; write and tune detections against security logs; support identity and access operations; produce audit and compliance evidence; evaluate and deploy new security tooling.
Seniority
Mid-level (2+ years experience), hands-on IC
