Act as the technical lead and escalation point for the SOC, guiding analysts during complex investigations and major incidents
Design, implement, and tune threat detections across SIEM, EDR/XDR, and other security telemetry platforms
Lead and coordinate incident response activities, including investigation, containment, eradication, and recovery
Develop detection engineering practices aligned with adversary behaviors and frameworks such as MITRE ATT&CK
Conduct proactive threat hunting and continuously improve detection coverage
Build and maintain automation, enrichment pipelines, and response playbooks to improve SOC efficiency and investigation speed
Collaborate with infrastructure, network, cloud, and platform engineering teams to ensure high-quality security telemetry and monitoring coverage
Define and track SOC performance metrics (alert fidelity, MTTD, MTTR) and lead initiatives to improve detection quality

Requirements

7–10+ years of experience in cybersecurity, security operations, detection engineering, or incident response
Strong experience with SIEM platforms such as Splunk, Microsoft Sentinel, Elastic, or QRadar
Hands-on experience with EDR/XDR platforms and endpoint investigation workflows
Deep understanding of attack techniques, threat detection methodologies, and adversary tactics
Experience developing detection rules, correlation logic, and behavioral analytics
Strong scripting or automation skills using Python, PowerShell, or similar languages
Solid understanding of network security, enterprise infrastructure, and cloud environments (AWS, Azure, or GCP)

Benefits

employer-subsidized Medical, Dental, Vision, and Life Insurance
Short-Term and Long-Term Disability
401(k) match
Flexible Spending Accounts
Health Savings Accounts
EAP and Educational Assistance
Parental Leave
Paid Time Off (for vacation, personal business, sick time, and parental leave)
12 Paid Holidays

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

cybersecuritysecurity operationsdetection engineeringincident responsethreat detection methodologiesdetection rulescorrelation logicbehavioral analyticsscriptingautomation

Soft Skills

leadershipcollaborationcommunicationproblem-solvinganalytical thinking