Security Operations Platform Engineer

First Quality

Security Operations Platform Engineer managing SIEM/SOAR platform for First Quality Enterprises. Overseeing threat detection, alert tuning, and incident response in a collaborative environment.

Posted 7/31/2026full-timeRemote • Florida, New Jersey, Pennsylvania, Texas • 🇺🇸 United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in configuring and maintaining SIEM/SOAR platforms, optimizing data pipelines, and developing detection rules to enhance security posture. Proficient in scripting for automation and familiar with compliance frameworks and security standards.

Highest-signal resume keywords

SIEM Platform ManagementScripting (Python, PowerShell)Data Normalization Standards (CEF, LEEF, JSON)Compliance Frameworks (NIST, ISO 27001, SOX, HIPAA)Security Certifications (Security+, CySA+, CASP+, GCIA, GCIH, CISSP)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

SIEM ConfigurationSOAR Platform ManagementLog Source OnboardingData Pipeline OptimizationDetection Rules DevelopmentLog AnalysisIncident Response ProcessesQuery LanguagesAPI IntegrationData Retention Policies

Soft Skills

Analytical SkillsProblem-Solving SkillsStrong Communication SkillsCollaboration SkillsIndependence

Tools & Technologies

SIEM/SOAR PlatformsFirewallsIDS/IPSEDRCloud Security LogsAzureAWSGCP

Certifications & Qualifications

Security+CySA+CASP+GCIAGCIHCISSP

Industry Keywords

MITRE ATT&CKThreat IntelligenceSOC OperationsData IntegrityLog IntegrityCompliance Standards

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityFirewallsGoogle Cloud PlatformPython

About the role

Key responsibilities & impact

Configure and maintain SIEM/SOAR platform
Monitor platform performance, availability, and data health
Review and maintain upgrades, integrations, and ongoing optimization
Manage role/scope-based access controls and data retention policies
Onboard and normalize log sources (firewalls, endpoints, servers, cloud, SaaS, identity providers, etc.)
Build integrations via scripting for custom data onboarding utilizing APIs
Troubleshoot ingestion issues and ensure log integrity and completeness
Review and maintain parsing rules and data mappings
Optimize data pipelines for performance and cost efficiency
Develop, tune, and maintain detection rules logic, and alerting thresholds to improve fidelity and reduce false positives
Collaborate with SOC analysts during active investigations to provide platform support, log extraction, and forensic data retrieval
Build and maintain dashboards for SOC operations, compliance, and executive reporting
Develop and maintain scheduled and ad-hoc reports for stakeholders
Develop KPIs and metrics for security posture and incident trends
Evaluate new log sources and security integrations
Recommend enhancements to improve visibility and coverage
Stay current on platform updates and best practices
Evaluate existing integrations and data to improve parsing, data normalization, and data reduction

Requirements

What you’ll need

Bachelor’s degree in Cybersecurity, Information Technology, or related field (or equivalent experience)
3+ years of experience managing a SIEM platform
Knowledge of network protocols, firewalls, IDS/IPS, EDR, cloud security logs
Understanding of data normalization standards (CEF, LEEF, JSON, etc.)
Experience with SIEM query languages
Experience with scripting (Python, PowerShell, or similar) for automation
Working knowledge of MITRE ATT&CK, threat intelligence, and incident response processes
Preferred: 3+ years managing SOAR platform
Preferred: Experience developing automation, and response playbooks
Preferred: Familiarity with Azure, AWS, or GCP log configurations
Preferred: Experience supporting compliance frameworks (NIST, ISO 27001, SOX, HIPAA, etc.)
Preferred: Security+, CySA+, CASP+, GCIA, GCIH, CISSP or equivalent
Analytical and problem-solving skills
Strong troubleshooting and log analysis capabilities
Ability to translate security requirements into technical solutions
Strong communication skills for technical and executive audiences
Ability to work both independently and collaboratively in a fast-paced SOC environment
Travel up to 5 days per year

Benefits

Comp & perks

Competitive base salary and bonus opportunities
Paid time off (three-week minimum)
Medical, dental and vision starting day one
401(k) with employer match
Paid parental leave
Child and family care assistance (dependent care FSA with employer match up to $2500)
Bundle of joy benefit (years’ worth of free diapers to all team members with a new baby)
Tuition assistance
Wellness program with savings of up to $4,000 per year on insurance premiums
...and more!