Security Engineer III -SOC
Core
Design, build, and enhance technical capabilities for threat detection, investigation, and response, bridging engineering and operations to create scalable, automated security solutions.
Role type
Senior Security Engineer (SOC)
Builds
Automated detection playbooks, SIEM data pipelines, and SOAR workflows for threat response
Domain
Cybersecurity, Security Operations Center (SOC), Cloud Security
Deliverable
production ML models
Required skills
SIEM engineering, Detection as Code, SOAR automation, Threat hunting, Python/Go/Bash scripting, Threat intelligence integration, Incident response support, MITRE ATT&CK framework, NIST CSF/CIS Benchmarks
Preferred skills
DevSecOps experience, EDR/XDR administration, Digital forensics, OWASP knowledge, SOC 2/ISO 27001 compliance
Technologies
Splunk, Microsoft Sentinel, MISP, Recorded Future, VirusTotal
Responsibilities
Manage SIEM platform and log sources; Develop and maintain detection rules using Detection as Code; Create automated SOAR playbooks; Implement AI/ML for security operations; Conduct proactive threat hunting; Support incident response and post-incident reviews
Seniority
Senior, hands-on IC
