Security Engineer

Responsibilities

• Triage, investigate, and respond to alerts across the SOC queue, hitting SLAs and following playbooks
• Lead incident investigations, gather evidence, correlate events, and coordinate containment and recovery
• Build and tune AI-assisted and agentic workflows across SIEM, SOAR, and EDR, including Claude via API
• Engineer detection content: rules, queries, and alert tuning mapped to MITRE ATT&CK
• Write and maintain SOAR playbooks and automation scripts that cut manual toil and accelerate response
• Hunt for threats proactively, forming and testing hypotheses against current adversary TTPs
• Maintain the SOC technology stack: integrations, health, and content engineering across all platforms
• Keep SOX and SOC 2 Type 2 audit-ready evidence: logging coverage, incident records, and procedures
• Partner with IT, Cloud, Risk, and Compliance to embed telemetry and surface findings clearly
• undefined

Requirements

• Bachelor's degree in computer science, Cybersecurity, or a related field (or equivalent practical experience).
• 4+ years of hands-on experience in security operations, incident response, or threat detection
• Deep expertise with SIEM, SOAR, EDR/XDR, detection engineering, and incident response
• Experience writing SOAR playbooks and detection rules or queries in a major SIEM platform
• Experience operating in SOX and SOC 2 Type 2 environments, including control evidence and audit support
• Hands-on experience applying AI/LLMs to security operations or detection and response
• Strong communication skills with both technical peers and non-technical stakeholders
• undefined
• People's Skills
• Strong attention to detail with the ability to communicate technical concepts clearly to both technical and non-technical stakeholders
• Proactive, self-motivated, and results-driven mindset
• Thrives in a fast-paced, collaborative, team-oriented environment
• Excellent written and verbal communication skills
• Passion for continuous learning and staying current with emerging technologies
• Work environment/physical demands summary:
• This job operates in an office environment and uses a computer, telephone and other
• office equipment as needed to perform duties. The noise level in the work environment is typical of that of an office with an open seating floor plan. The employee may encounter frequent interruptions throughout the work day. The employee is regularly required to sit, talk, or hear.
• #LI-MA1
• All qualified applicants will receive consideration for employment without regard to age, race, color, religion, sex, sexual orientation, gender identity, national origin, status as a qualified individual with a disability, or Vietnam era or other protected veteran.

Benefits

Additional Information

We are seeking a Security Engineer with 4+ years of security operations experience to serve as a hands-on technical contributor within our 24/7 Security Operations Center (SOC). In this role you will be a core executor of our detection, investigation, and response capability, building AI-powered workflows, engineering detection content, and driving operational excellence in a SOX-regulated, SOC 2 Type 2 certified environment.

Your Match

How well this role fits your profile.

Company Intel

What employees say

Worked at echo? Share your experience