SOC Security Engineer
Core
Design, develop, and maintain SOC security platforms and tooling with a focus on SIEM, SOAR, and security automation.
Role type
SOC Security Engineer (Security Operations Center)
Builds
SOC security platforms, SIEM/SOAR tooling, Python-based automation services, AWS security integrations
Domain
Cybersecurity / Cloud Security / Blockchain Ecosystem
Deliverable
production ML models | product features | infrastructure
Required skills
Python development, AWS services (EC2, S3, Lambda, IAM, CloudWatch), SIEM operations, detection engineering, incident response, security automation, REST APIs, Docker, Linux
Preferred skills
Golang, Java, EDR familiarity, security telemetry analysis
Technologies
Python, AWS, SIEM, SOAR, Golang, Java, Docker, Linux, Git, REST APIs
Responsibilities
Design and maintain SOC security platforms and tooling; Develop Python-based services and security integrations; Support SIEM operations and detection engineering; Participate in SOC on-call rotation and incident response; Develop detection use cases and threat models; Collaborate with SOC analysts to improve automation and detection coverage
Seniority
Mid-level, hands-on IC