Security Engineer III – SOC

About the role

As a Senior Security Engineer on the Security Operations team, you will design, build, and enhance technical capabilities for threat detection, investigation, and response, turning security challenges into scalable, automated solutions.

Key responsibilities

• Manage the SIEM platform, onboard and normalize log sources, build parsers, and maintain high‑fidelity data pipelines.
• Develop and maintain a library of detections using a Detection‑as‑Code approach, aligned with the MITRE ATT&CK framework.
• Create and maintain SOAR playbooks and automated workflows to optimize alert triage, enrichment, and response.
• Investigate and integrate AI/ML techniques to improve triage, threat‑intel analysis, and detection enrichment.
• Integrate threat intelligence feeds into detection logic, SOAR playbooks, and hunting activities.
• Conduct hypothesis‑driven threat hunts and document findings to improve detection engineering.
• Provide engineering support during security incidents and contribute to post‑incident reviews.

Required profile

• Strong background in security engineering or DevSecOps, especially in cloud‑native environments.
• Hands‑on experience developing SIEM detections, threat‑hunting queries, and supporting incident response.
• Proficiency with core SecOps tools such as SIEM platforms (Splunk, Microsoft Sentinel), EDR/XDR solutions, and vulnerability scanners.
• Familiarity with threat intelligence platforms (MISP, Recorded Future, VirusTotal) and ability to embed intel into security workflows.
• Excellent scripting/programming skills (Python, Go, Bash) for building tools and automations.

Required skills

• SIEM platforms – Splunk, Microsoft Sentinel
• SOAR automation and playbook development
• Scripting – Python, Go, Bash
• Threat intelligence platforms – MISP, Recorded Future, VirusTotal
• Security frameworks – MITRE ATT&CK, NIST CSF, CIS Benchmarks
• Compliance standards – SOC 2, ISO 27001
• Cloud‑native security and DevSecOps practices