Security Operations Engineer III

About Allvue

We are Allvue Systems,the leading provider of software solutions for the Private Capital and Credit markets. Whether a client wants an end-to-end technology suite, or independently focused modules, Allvue helps eliminate the boundaries between systems, information, and people. We’re looking for ambitious, smart, and creative individuals to join our team and help our clients achieve their goals.

Working at Allvue Systems means working with pioneers in the fintech industry. Our efforts are powered by innovative thinking and a desire to build adaptable financial software solutions that help our clients achieve even more. With our common goals of growth and innovation, whether you’re collaborating on a cutting-edge project or connecting over shared interests at an office happy hour, the passion is contagious.

We wantall of our team members to be open, accessible, curious and always learning. As a team, we take initiative, own outcomes, and have passion for what we do. With these pillars at the center of what we do, we strive for continuous improvement, excellent partnership and exceptional results. Come be a part of the team that’s revolutionizing the alternative investment industry.

Define your own future with Allvue Systems!

The Security Operations Engineer III is a senior individual contributor within the Allvue Information Security team responsible for strengthening detection, response, and security automation capabilities. The role combines hands-on management of endpoint detection and response, SIEM and SOAR, email security, and secure remote access technologies. The engineer will develop and tune detections, investigate security and insider events, conduct threat hunting, build automated response workflows, manage integrations and log ingestion, support incident response and the on-call rotation, and assist with the production of operational reporting and metrics.

• Develop, tune, test, and maintain detections across EDR, SIEM, email security, and secure remote access technologies.
• Independently triage and investigate security alerts, incidents, and insider events; coordinate response actions and document findings.
• Conduct threat hunts using threat intelligence and recognized threat frameworks and participate in the incident-response on-call rotation, and coordinate with the MDR provider (Rapid7) when required.

• Administer, maintain, and optimise Crowd Strike, Rapid7 SIEM and SOAR, Mimecast, and Prisma Global Protect security capabilities
• Manage security-platform integrations and log ingestion, monitor data health, and resolve collection or connectivity issues.
• Evaluate, test and document platform changes, configurations, playbooks, and operational procedures.
• Identify platform and detection gaps and implement improvements that strengthen operational reliability and security coverage

• Build and maintain SOAR workflows and security automations using Power Shell, Python, and APIs.
• Produce operational reporting and metrics covering detection, investigation, response, platform health, and automation outcomes.
• Translate investigation findings, incident lessons, and detection gaps into improvements to security coverage and response processes.
• Apply emerging AI capabilities, including LLM-based tools, where appropriate to improve security or technical workflows while recognizing associated security risks and limitations.

• Demonstrated ability to operate independently across security operations, detection engineering, incident response, threat hunting, and security-platform engineering.
• Demonstrated ability to evaluate complex security…