Security Operations Engineer

Location:

Greensboro, NC (Preferred) | Remote Considered Duration: 6-9 Month Contract with Potential Extension or Conversion

Schedule:

Hybrid (3 days onsite preferred if local)

Security Operations Engineer to provide dedicated engineering support within the Global Cyber Security Operations (GCSO) organization. This individual will be responsible for improving security telemetry onboarding, enhancing data quality across security platforms, strengthening detection content, and driving automation initiatives that improve operational efficiency and reduce manual analyst workload. The engineer will also support various platform enhancement initiatives across the cybersecurity technology stack while helping mature a growing Security Operations Engineering function.

• Improve security telemetry onboarding and data quality within Cribl environments.
• Develop, tune, and optimize security detections within the SIEM and Relia Quest platforms.
• Design and implement automation workflows that reduce manual analyst effort and improve security operations performance metrics.
• Enhance incident detection and response capabilities through advanced detection engineering practices.
• Support ongoing platform enhancement initiatives across the GCSO security technology stack.
• Build and maintain integrations between security tools and data sources.
• Improve operational visibility and monitoring across cloud and enterprise environments.
• Partner closely with Security Operations, Incident Response, and Security Engineering teams.
• Develop documentation and provide knowledge transfer to internal security teams.
• Deliver production-ready security enhancements including integrations, detections, workflow automation, and platform tuning improvements.

• 5+ years of cybersecurity experience with a combination of Security Operations, Incident Response, and Security Engineering.
• Experience working within a SOC or Incident Response environment.
• Strong Security Engineering background.
• Microsoft Defender suite experience.
• Azure security and cloud security engineering experience.
• Detection engineering experience.
• Security automation and orchestration experience.
• Experience improving incident detection and response processes.
• Strong understanding of security telemetry, log pipelines, and event data management.

• Cribl administration, integration, or engineering experience.
• SIEM engineering and content development experience.
• Relia Quest experience.
• Defender for Cloud.
• Azure Dev Ops security experience.
• AWS security engineering and cloud security best practices.
• Experience building automated security workflows and reducing manual analyst tasks.
• Experience supporting large enterprise cybersecurity environments.

• Security telemetry integrations
• Detection use cases and enhanced detection content
• SIEM tuning and optimization improvements
• Cribl onboarding and data quality improvements
• Automated security workflows and response automations
• Platform enhancement initiatives across the security stack
• Documentation, runbooks, and knowledge transfer materials

The ideal candidate has progressed from a hands-on SOC Analyst or Incident Response background into Security Engineering. They possess strong technical expertise across enterprise security platforms, cloud security, detection engineering, and automation. This individual should be capable of quickly contributing to ongoing initiatives while helping enhance visibility, automation, detection quality, and overall cyber operations maturity.

Manpower Group, Parent Company of:
Manpower, Experis and Talent Solutions Experis® is a global leader in technology…