Security Operations Engineer

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Full Time Tamarac, FL, US

Salary Range: $75,000.00 To $85,000.00 Annually

Security Operations Engineer

The Opportunity

The Security Operations Engineer is responsible for executing and operating enterprise cybersecurity functions across Richline Group subsidiaries. Reporting to the Senior Cybersecurity Analyst / Cybersecurity Lead, this role focuses on vulnerability management, patch coordination, security monitoring, endpoint security, and incident response execution. The position supports a unified cybersecurity stack and works corporately across locations, with a strong emphasis on Microsoft Windows enterprise environments.

What You'll Do

Vulnerability & Patch Management

• Operate enterprise vulnerability scanning and patch management platforms.
• Support risk-based patch schedules, remediation priorities, and vulnerability service-level targets across subsidiaries.
• Coordinate remediation activities with Network, Systems, and Endpoint Administrators.
• Track remediation progress, validate closure, and produce vulnerability and patch compliance reporting.
• Support vulnerability exception handling in coordination with GRC and cybersecurity leadership.

Security Monitoring, EDR & Alert Triage

• Monitor and investigate security alerts from SIEM, MDR, EDR/XDR, IDS/IPS, cloud security, and related enterprise security technologies.
• Perform first-level investigation and triage, identify false positives, document findings, and escalate validated issues when additional action is required.
• Perform day-to-day operational tasks within enterprise endpoint detection and response platforms, including alert review, endpoint investigation, containment support, and policy-related administration under approved standards.
• Support tuning and continuous improvement of security monitoring and detection capabilities.
• Execute incident response activities such as evidence collection, endpoint isolation, containment, remediation support, and documentation.
• Maintain incident timelines, investigation notes, and supporting evidence.
• Support post-incident reviews and corrective action tracking.

Cloud, Web & Internet-Facing Security

• Support the operation and monitoring of cloud and internet-facing security controls, including web application firewalls (WAF), bot management and detection, application and API protection, traffic filtering, and related threat-prevention technologies.
• Assist with investigation of suspicious web, application, and cloud activity and coordinate remediation or escalation as required.
• Support security controls across cloud-based and hybrid enterprise environments.

Security Tool Operations & Automation

• Perform day-to-day operational management of cybersecurity tools under approved designs, policies, and standards.
• Support SOAR playbook execution, workflow automation, and operational security process improvements.
• Maintain documentation, operational procedures, and technical runbooks for assigned security technologies.
• Work closely with IT Operations, GRC, application teams, and external security providers to coordinate security activities and remediation.
• Provide operational metrics, findings, and status reporting to cybersecurity leadership.
• Participate in security reviews, incident exercises, and continuous improvement initiatives.

What You'll Need

• 3-5 years of hands-on experience in security operations, infrastructure security, SOC operations, or a related cybersecurity role.
• Strong working knowledge of enterprise Microsoft Windows environments, including Windows endpoints, Windows Server, Active Directory, patching, authentication, and security hardening concepts.
• Hands-on experience working with enterprise EDR/XDR platforms, including alert investigation, endpoint activity review, containment, and remediation support.
• Experience with vulnerability management and enterprise patch management, including vulnerability review, risk-based prioritization, remediation tracking, and validation.
• Experience with SIEM and security monitoring platforms, including alert triage, log analysis, investigation, documentation, and escalation.
• Working knowledge of incident response processes and security investigation practices.
• General understanding of cloud and internet-facing security controls such as WAF, application protection, bot protection, API security, and cloud security technologies.
• Strong…