Senior SOC Engineer

Responsibilities

• Perform advanced threat detection, analysis, and response across multiple platforms and environments
• Lead investigations into security incidents and coordinate remediation efforts
• Develop and tune SIEM content, alerts, and dashboards
• Monitor endpoint and network security tools to identify anomalies and enforce security policies
• Collaborate with engineering and IT teams to implement secure configurations and best practices
• Research emerging threats and recommend innovative solutions to strengthen security posture
• Support compliance initiatives and contribute to security audits and risk assessments
• Lead security incident investigations and drive remediation to closure
• Monitor EDR and network tools for anomalies and enforce security policy
• Collaborate with engineering to harden configurations and implement secure design
• Conduct threat hunting, vulnerability management, and emerging threat research

• 5+ years in security operations
• 10+ years earns bonus consideration
• Hands-on SIEM expertise, including content development
• Experience with Crowd Strike or Carbon Black (EDR)
• Experience with Mimecast
• Experience with vulnerability management tools
• Working knowledge of the MITRE ATT&CK framework
• Working knowledge of cloud security principles
• Python or Bash scripting for automation and workflow improvement
• Strong communication skills for briefing leadership and working across non-security teams
• Bachelor's degree in IT Security, Computer Science, or related field — or equivalent experience
• Equivalent relevant experience may substitute for educational requirements at the hiring manager’s discretion
• Nice to have: CISSP, GIAC, CCSP, or AWS Security Specialty
• Nice to have: SOAR experience
  
  Nice to have:
  Cloud-native security tooling
• Must be able to work full-time in-office in Raleigh, NC or Salt Lake City, Utah
• WGU is not able to provide visa sponsorship for this role

Demonstrates expertise in advanced threat detection, incident response, and security operations, with a strong focus on SIEM content development and vulnerability management. Proficient in collaborating with cross-functional teams to implement secure configurations and enhance security posture.

• Advanced Threat Detection
• SIEM Content Development
• Crowd Strike EDR Experience
• Vulnerability Management Tools
• MITRE ATT&CK Framework Knowledge

• Threat Detection
• Incident Response
• SIEM Development
• Vulnerability Management
• Python Scripting
• Bash Scripting
• Cloud Security Principles
• Threat Hunting
• Security Audits
• Risk Assessments

• Strong Communication Skills

• CISSP
• GIAC
• CCSP
• AWS Security Specialty

• Security Operations
• Incident Investigation
• Compliance Initiatives
• Security Policies
• Emerging Threat Research

• Crowd Strike
• Carbon Black
• Mimecast
• EDR Tools
• Cloud-native Security Tooling