Security Engineer III
Core
Design, build, and improve technical capabilities for detecting, investigating, and responding to security threats at the intersection of engineering and operations.
Role type
Senior Security Operations Engineer (SOC/DFIR)
Builds
Scalable, automated security detection and response solutions
Domain
Cybersecurity, Cloud Security, Security Operations
Deliverable
production ML models
Required skills
SIEM engineering, Digital forensics and incident response (DFIR), Threat hunting, Detection engineering (Detection as Code), Threat intelligence integration, Python/Go/Bash scripting, Cloud-native security, MITRE ATT&CK framework
Preferred skills
AI/ML application in security operations, OWASP knowledge, SOC 2/ISO 27001 compliance
Technologies
SIEM platforms, EDR/XDR solutions, Vulnerability scanners, Version control, Automated testing pipelines
Responsibilities
Investigate and triage security alerts from logs, endpoints, identity, cloud, and network telemetry; Support incident response and evidence collection; Engineer SIEM parsers and data pipelines; Develop and maintain detection rules using Detection as Code; Integrate threat intelligence into detection logic; Conduct proactive threat hunts.
Seniority
Senior, hands-on IC
