Security Operations Engineer

We are seeking an experienced and motivated Security Operations Engineer to join our cybersecurity team. This mid-level role is designed for professionals with 3–5 years of hands‑on experience in Security Operations Center (SOC) activities, incident response, and network security. In addition to traditional SOC duties, this role will also take ownership of telecom systems and enterprise collaboration platforms, ensuring their availability, security, and compliance.

The Security Operations Engineer will play a key role in threat detection, incident handling, and continuous improvement of security processes, while mentoring junior team members.

• Monitor, analyze, and correlate alerts, events, and logs from SIEM and other security tools.
• Perform advanced triage and initial investigation of security events to determine severity and business impact.
• Recommend immediate containment and remediation actions, escalating high‑severity incidents when necessary.
• Lead investigations of moderate to complex security incidents, including evidence collection and documentation.
• Contribute to containment, eradication, and recovery activities in coordination with senior engineers.
• Conduct root cause analysis and provide recommendations to prevent recurrence.
• Participate in post‑incident reviews and help implement process improvements.

• Monitor, configure, and maintain network security devices such as firewalls, switches, and routers.
• Troubleshoot and resolve connectivity and security‑related network issues.
• Document and maintain accurate records of network and infrastructure changes.
• Administer and monitor telecom systems and enterprise collaboration platforms.
• Implement security controls, access policies, and monitoring to ensure platform integrity.
• Investigate and remediate suspicious activities within communication and collaboration environments.
• Partner with IT and vendors to improve reliability, compliance, and resilience of communication systems.
• Provide guidance and training to end users on secure practices.
• Integrate threat intelligence feeds into monitoring processes.
• Proactively hunt for indicators of compromise (IOCs) across systems and networks.
• Share actionable intelligence with internal teams to improve detection and defense.

• Analyze vulnerability scan results, assess business risk, and recommend remediation priorities.
• Work with system and application owners to remediate vulnerabilities in a timely manner.
• Contribute to reporting and dashboards for vulnerability management metrics.

• Bachelor’s degree in Cybersecurity, Information Technology, or related field (or equivalent experience).
• 3–5 years of experience in SOC operations, incident response, or network/security engineering.
• Demonstrated experience supporting telecom and/or collaboration platforms.

• Proficiency with SIEM tools (e.g., Splunk, Microsoft Sentinel, QRadar).
• Strong understanding of network protocols, routing, and switching.
• Hands‑on experience with firewalls, IDS/IPS, and endpoint detection solutions.
• Familiarity with telecom protocols and enterprise collaboration technologies.
• Solid knowledge of incident response processes and playbooks.
• Scripting or automation skills in Python, Power Shell, or Bash are a plus.
• Strong analytical, troubleshooting, and communication skills.

Our colleagues, like our clients, tend to stay with CAPTRUST for years. There’s a reason for it; it’s a great culture in which to work and grow. We all work together, each of us motivating those around us with our commitment to high standards. At CAPTRUST, expect a fully stocked break room, fun employee events, and a quality team surrounding you with opportunities for personal growth.

Our Employee Benefits Package shows how much we value our team. Some benefits include:

• Company discretionary bonus.
• Health, dental, and vision coverage, employer 401(k) plan and company match, health savings accounts, flexible spending accounts, and voluntary supplemental plans subject to plan terms.
• Company…