Mid-Level Security Platform Engineer - SIEM​/SOAR

Overview

This role is at Spirit Aero Systems, Inc. a wholly owned subsidiary of The Boeing Company, supporting Spirit’s Commercial Business Units(“Spirit Commercial”). Spirit Commercial designs and builds commercial aerostructures, including for Boeing Commercial Airplanes, one of Boeing’s three business units and the premier manufacturer of commercial jetliners for decades. Spirit Commercial’s core products include fuselages, pylons, nacelles and wing components, with a focus on innovative composite and aluminum manufacturing solutions.

The Security Platform Engineer III is responsible for the implementation, maintenance, optimization, and maturation of enterprise SIEM, SOAR, and Identity Detection and Response capabilities. This role ensures that security technologies supporting monitoring, incident response, threat hunting, detection engineering, automation, identity threat visibility, case management, reporting, and compliance are reliable, integrated, scalable, and aligned with program needs.

This role is focused on platform strategy, technical enablement, data quality, integrations, automation, workflow improvement, operational readiness, and long-term maturity. The engineer enables analysts, responders, and threat hunters by improving security visibility, alert fidelity, response consistency, investigation speed, and technology-driven risk reduction through effective use of security detection and response platforms.

• Design, implement, maintain, and optimize enterprise SIEM, SOAR, and Identity Detection and Response capabilities.
• Support platform upgrades, configuration changes, integrations, capability rollouts, application updates, content updates, and continuous improvement initiatives.
• Support audit and compliance activities by ensuring required logs, reports, evidence, access records, and operational documentation are accurate and available.
• Create technical documentation, architecture diagrams, workflow diagrams, operating procedures, readiness reports, metrics, and leadership summaries.
• Mentor junior engineers or analysts on security detection platform capabilities, data usage, query practices, automation workflows, identity detection concepts, and security operations enablement.

• Minimum 5 years of relevant cybersecurity, security engineering, security operations, incident response, detection engineering, automation, identity security, infrastructure, platform administration, or related experience.
• Advanced cybersecurity, security engineering, security operations, automation, identity security, cloud, infrastructure, or platform certification. Degree may qualify in lieu of certification.
• Hands‑on experience administering, engineering, or supporting enterprise security monitoring, automation, detection, or response platforms.
• Strong understanding of SIEM, SOAR, and Identity Detection and Response concepts, including data ingestion, normalization, enrichment, alerting, workflows, case management, automation, identity context, and reporting.
• Strong documentation, troubleshooting, communication, stakeholder management, and technical coordination skills.

• Bachelor’s degree in cybersecurity, information technology, computer science, engineering, or related field required.
• Experience with enterprise SIEM, SOAR, User and Entity Behavior Analytics, security analytics, identity threat detection, or related security operations platforms.
• Experience with SOAR playbook development, integrations, custom functions, enrichment workflows, case management, response automation, and approval workflows.
• Familiarity with NIST guidelines, CIS Controls, ISO 27002, CMMC, FedRAMP, and/or other security and…