Cyber Security Engineer

This Cybersecurity Engineer role centers on SIEM/SOAR engineering , focused on detecting threats, responding to them quickly, and staying ahead of what's coming next.

This is a build and implementation role. You take security designs and turn them into working, operational solutions, standing up the detection capabilities, automations, and platforms that power the team's threat detection and response.

What You'll Do

• Build and refine detection use cases and correlation rules to sharpen how threats get surfaced
• Develop and maintain SOAR playbooks and automated response workflows to speed up incident handling
• Implement and configure security tool integrations across cloud, endpoint, identity, and network environments, based on the broader security design
• Build and tune the detection and automation capabilities that support SOC, threat hunting, and incident response teams
• Stay current on the threat landscape and translate what's changing into concrete upgrades to detection and response tooling
• Pitch in on audit and compliance work when the security side needs technical input

What We're Looking For

• Hands-on experience with SIEM and/or SOAR platforms
• Practical knowledge of one or more SIEM tools (such as Splunk, Microsoft Sentinel, Google SecOps, QRadar, or ArcSight)
• Comfort building and maintaining SOAR playbooks and automation
• Working familiarity with frameworks like MITRE ATT&CK and CIS Controls
• Time spent in a SOC environment goes a long way toward hitting the ground running here