Senior Security Engineer, Detection & Response (SOC)
New
P
PrizePicksDaily fantasy sports
Open to qualified applicants from anywhere in the U.S. and are willing to consider remote candidatesFull-TimeSenior
SalaryThe typical salary range for this position is $160,000 to $175,000.
Apply NowOpens the employer's application page
Job Details
- Experience
- 5+ years in a SOC, incident response, or detection engineering role
- Required Skills
- Python
Requirements
- Have 5+ years of experience in a SOC, incident response, or detection engineering role.
- Have demonstrated ownership of an incident response or monitoring program beyond queue work.
- Have experience building or significantly maturing a SOC/IR function from an early stage to production-ready.
- Understand the full incident response lifecycle: preparation, detection, containment, eradication, recovery, and lessons learned.
- Have hands-on SIEM experience with log ingestion, correlation rules, detection tuning, and content development.
- Have digital forensics experience, including evidence collection and analysis across host, network, and/or cloud environments.
- Be able to build scripts or automation for triage and response workflows using Python or similar.
- Have working knowledge of at least one major cloud provider: AWS, GCP, or Azure.
- Be familiar with MITRE ATT&CK and common threat actor TTPs.
- Be able to define risk in technical and business-relevant terms.
- Have clear written communication skills for playbooks and incident documentation.
Responsibilities
- Own monitoring and triage of SIEM events and alerts, tune detection content, reduce false positives, and close coverage gaps.
- Lead the design and continuous improvement of incident response playbooks.
- Lead threat hunting for malicious or anomalous activity not caught by alerts and automated detection.
- Strengthen digital forensics processes and tooling, including investigation and evidence handling.
- Drive automation for alerting, enrichment, and triage workflows.
- Lead incident response and coordinate with business partners as needed.
- Document incidents, root causes, and remediation.
- Build a structured, blameless post-incident review process, track action items to closure, and ensure follow-through.
- Evolve IR metrics, escalation paths, and program priorities.
View Full Description & ApplyYou'll be redirected to the employer's site
