Lead SOC Engineer

Are you eager to join a dynamic and expanding company where you can both learn and make a meaningful impact? If you possess a strong sense of empathy, enjoy assisting others, thrive in a fast-paced environment, and excel at problem-solving,

Founded in 1986, OnTrac has evolved into the leading provider of same-day and next-day delivery services in the U.S. for premier e-commerce and product-supply businesses, including five of the largest retailers in the U.S.

Remote - This position may be performed remotely in states where the company is authorized to employ individuals.

The expected starting base pay range for this position is $156,000 - $195,000, with full potential base salary range over a successful candidate’s tenure in the position of $156,000 - $234,000. Actual compensation will be determined based on experience, skills, internal equity, and other job-related factors.

We are seeking a Lead Cyber Security Engineer, a senior-level individual contributor responsible for designing, building, and maintaining robust security architectures. This is a 'hands-on-keyboard' role that requires the ability to pivot between deep technical engineering and assisting in strategic support. You will act as a primary technical enabler for the Security Operations Center (SOC) by optimizing detection capabilities and for the Governance, Risk, and Compliance (GRC) team by translating complex regulatory requirements into technical controls and automated evidence collection.

Employees are eligible for a comprehensive benefits package which may include:

• Medical, dental, and vision insurance
• Life and short- and long-term disability coverage
• 401(k) retirement savings plan with company match
• Flex vacation in states other than CA, CO, IL, MA, MT, and NE, with accruals up to 96 hours for first year of employment with tenure-based increases up to 160 hours
• Two (2) floating holidays per year
• Paid sick leave*
• Six (6) paid company holidays
• Two (2) weeks paid pregnancy disability leave, four (4) weeks paid parental bonding leave
• Additional wellness and employee assistance programs

Benefits eligibility and offerings are subject to the terms and conditions of the applicable plans and company policies.

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field (or equivalent practical experience).
• 10 years of progressive experience in IT and Security, at least 3 years in a senior or lead engineering capacity.
• CISSP, CISM, or hands-on technical certifications like GIAC (GCIA, GCDA) or Offensive Security (OSCP) are strongly preferred.
• Must demonstrate a 'Generalist' Mindset, proficient across multiple domains, including network security (firewalls, Zero Trust), endpoint protection, and cloud security (AWS/GCP).
• Scripting & Automation experience with a strong ability to code/script in Python, Power Shell, or Bash to automate repetitive security tasks and integrations.
• OC/Threat Hunting Tech experience and a deep understanding of SIEM logic, YARA rules, and EDR configuration to improve detection efficacy.
• GRC Fluency and the ability to interpret frameworks such as NIST CSF, ISO 27001, or SOC2 and implement the technical controls required to meet them.
• The unique ability to explain deep technical vulnerabilities to non-technical risk stakeholders and vice-versa.

A summary of key responsibilities for the role is outlined below. Additional duties may be assigned as needed to support business objectives.

• Cross-Functional Enablement: Design and implement technical solutions that assist the SOC in alert orchestration (SOAR) and provide the GRC team with automated risk…