Security Operations Engineer II
Core
Engineer, operate, and automate capabilities for the company's Cyber Defense program, maintaining security platforms and performing initial triage of cybersecurity incidents.
Role type
Security Operations Engineer II (IC)
Builds
Enterprise Cyber Defense platforms, detection logic, response playbooks, and automated investigation workflows.
Domain
Cybersecurity / Information Security
Required skills
SIEM operations, EDR management, secure web access policies, incident triage, scripting/automation, Infrastructure as Code, cloud security logs, incident response frameworks, technical documentation
Preferred skills
Public cloud incident investigation, security orchestration, web application protection, reusable IaC modules, AI-assisted development workflows
Technologies
SIEM, EDR, WAF, scripting languages, APIs, webhooks, Infrastructure as Code, cloud services
Responsibilities
Operate and maintain enterprise Cyber Defense platforms; maintain next-generation SIEM integrations; manage secure web access policies; perform initial triage of cybersecurity alerts; support containment, remediation, and recovery actions; develop and tune detection logic; build response playbooks and automate tasks; monitor platform health and maintain documentation.
Seniority
Mid-level, hands-on IC
