Security Operations Engineer
Core
Triage and investigate security alerts, run incident response efforts, and improve detection tools and automated workflows to protect people, systems, and information.
Role type
Security Operations Engineer (SOC Analyst)
Builds
Security monitoring tools, runbooks, and automated response workflows
Domain
Cybersecurity / Cloud Security / Identity & Endpoint Security
Required skills
Security alert triage, incident response, SIEM usage, endpoint detection and response (EDR), email security investigation, threat analysis (phishing, account compromise), log querying, evidence collection, basic scripting (Python)
Preferred skills
Cloud platform investigation (AWS, GCP), SaaS security, identity systems, threat hunting, detection tuning, forensic analysis (macOS, Windows, Linux), API usage, automation platforms
Technologies
SIEM, EDR, Email Security Platforms, Python, AWS, GCP, macOS, Windows, Linux
Responsibilities
Monitor, triage, and investigate security alerts across identity, endpoint, email, SaaS, and cloud environments; Own routine investigations and incidents through to a documented outcome; Support experienced responders during major security incidents; Maintain clear investigation records and provide handovers; Improve runbooks, tune detections, and contribute small scripts or automated workflows; Participate in post-incident reviews
Seniority
Junior to Mid-level, collaborative apprenticeship
