Senior SOC Engineer

If you’re passionate about building a better future for individuals, communities, and our country—and you’re committed to working hard to play your part in building that future—consider WGU as the next step in your career.

Driven by a mission to expand access to higher education through online, competency-based degree programs, WGU is also committed to being a great place to work for a diverse workforce of student-focused professionals. The university has pioneered a new way to learn in the 21st century, one that has received praise from academic, industry, government, and media leaders. Whatever your role, working for WGU gives you a part to play in helping students graduate, creating a better tomorrow for themselves and their families.

The salary range for this position takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs.

At WGU, it is not typical for an individual to be hired at or near the top of the range for their position, and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is:
Grade:
Technical 409

Pay Range: $ - $Job Description Our Security Operations Center (SOC) team is responsible for a broad range of security operations, including monitoring, incident response, risk assessment, policy development, audit and compliance, technical operations, and collaboration across departments. This team plays a critical role in safeguarding WGU’s systems and data while driving innovation and collaboration across the organization.

As a Senior SOC Engineer, you will lead advanced security monitoring and incident response efforts, ensuring WGU maintains a strong and resilient security posture. You’ll work on cutting-edge technologies, collaborate with cross-functional teams, and help shape the future of our security operations.

What You’ll Do
• Perform advanced threat detection, analysis, and response across multiple platforms and environments
• Lead investigations into security incidents and coordinate remediation efforts
• Develop and tune SIEM content, alerts, and dashboards to improve detection capabilities
• Monitor endpoint and network security tools to identify anomalies and enforce security policies
• Collaborate with engineering and IT teams to implement secure configurations and best practices
• Research emerging threats and recommend innovative solutions to strengthen security posture
• Support compliance initiatives and contribute to security audits and risk assessments

What you'll own Advanced threat detection, triage, and response across multi-platform environments

Lead security incident investigations and drive remediation to closure

Build and tune SIEM content, alerting rules, and detection dashboards

Monitor EDR and network tools for anomalies and enforce security policy

Collaborate with engineering to harden configurations and implement secure design

Threat hunting, vulnerability management, and emerging threat research

Support audits, compliance initiatives, and risk assessments

What you bring5+ years in security operations (10+ years earns bonus consideration)
Hands-on SIEM expertise — content development, not just querying

Experience with Crowd Strike or Carbon Black (EDR), Mimecast, and vulnerability management tools

Working knowledge of the MITRE ATT&CK framework and cloud security principles

Python or Bash scripting for automation and workflow improvement

Strong communicator who can brief leadership and work across non-security teams

Bachelor's degree in IT Security, Computer Science, or related field — or equivalent experience

Nice…