Senior Security Engineer- Security Operations
Core
Senior technical lead for detection and response platforms, owning architecture, detection content, automation, and telemetry for enterprise IT, cloud, and manufacturing (OT) environments.
Role type
Senior IC security operations engineer (detection engineering & SOC architecture)
Builds
Detection content, SOAR playbooks, telemetry pipelines, and automated response workflows
Domain
Cybersecurity, Security Operations, Manufacturing OT
Required skills
SIEM/SOAR/EDR administration, detection-as-code, MITRE ATT&CK mapping, Python/PowerShell, incident response, MSSP oversight, threat hunting, log normalization, cloud security integration
Preferred skills
GIAC/CISSP certifications, Git/CI-CD pipelines, Sigma rules, purple teaming, AI-assisted triage
Technologies
Splunk, Microsoft Sentinel, Cortex XSIAM, CrowdStrike, AWS, Azure, GCP, Microsoft 365
Responsibilities
Design and maintain detection content and SOAR playbooks; oversee MSSP operations and incident escalation; conduct threat hunting and validate detection effectiveness; manage telemetry coverage and log sources; partner with OT and cloud security teams; mentor analysts and transfer knowledge
Seniority
Senior, hands-on IC
