Security Operations Engineer
3 days ago
About the Role
This role is accountable for the architecture, engineering, and automation of in-house security platforms including the Microsoft Sentinel SIEM and associated SOAR tooling. The ideal candidate will have deep technical expertise in the Microsoft security stack and have demonstrated excellence in the development of security automation across domains such as alert triage, response, as well as other security processes such as patch and vulnerability management. They will also work extensively with various IT teams to define appropriate log ingestion, data enrichment, alerting and response actions via the SIEM/SOAR platform. They will also support the Security Operations Center (SOC) for advanced SIEM queries and analytic alerts. Primary responsibilities in this role include:
- Identification of and deployment of new detections or automations within the firm's SIEM / SOAR platform.
- Drive creation and implementation of SIEM content (e.g. rules, alerts, dashboards, etc.)
- Ensure better analytics via SIEM – improve signal-to-noise ratio in SIEM content. Conduct regular assessments and tuning of Sentinel configurations to reduce false positives and enhance detection capabilities
- Design and implementation of automation for alert enrichment, common detections closure, and response actions
- Benchmarking of existing detections and development of a roadmap for expansion of coverage.
- Continuous testing of SIEM / SOAR platform to identify and remediation gaps in detection and prevention coverage
- Integration with the external SOC provider to optimize the partnership and improve detection and response capabilities
- Consolidation of data sources across many Microsoft tenants, systems, and companies into a single source for consolidation of Security Operations procedures
- Maintenance of all Security Operations tooling to ensure high availability of all log sources
- Partnering with Security Analysts to enhance Security Operations procedures as well as incident response.
- Consolidation and automation of Security Operations Metrics from various sources
- Automation of Incident Response processes and workflows
- Development of and adherence of SIEM Engineering change control procedures and processes
- Provide training and support to team members on SIEM functionalities
Requirements and Qualifications
- Bachelor’s degree in Computer Science, Information Security, or a related field.
- 3+ years in a security related engineering role - MUST HAVE
- 2+ years of SIEM/SOAR Engineering Experience - MUST HAVE
- Deep technical understanding of Microsoft Sentinel (MUST HAVE), Log Analytics, Defender, and other Microsoft security tooling
- Demonstrated excellence is the area of security automation
- Proficiency with automation tooling (e.g. Terraform) and scripting languages (KQL, Python, Powershell) - MUST HAVE
- Proficiency with Microsoft Power Apps, Azure Functions, Logic Apps, and other Microsoft automation tooling
- Proficiency in API development with the goal of integrating security tooling
- Familiarity with various log ingestion methodologies into a SIEM environment.
- Familiarity with automated development lifecycles and pipelines (DevOps)
- Familiarity with Cisco security tooling including Meraki and Umbrella
- Experience in multi-tenant or MSP like environments a plus
- Possession of or ability to obtain professional certifications in information security or risk management, such as a CISSP, CISM, CEH, or forensic certifications.
-
Security Operations Engineer
6 days ago
Dallas, United States Saragossa Full timeJoin a growing team and help to scale the security operations function at the technology arm of a private investment firm experiencing exponential growth.As a Security Operations Engineer, You'll be responsible for the engineering and automation of in-house security platforms including the Microsoft Sentinel SIEM and associated SOAR tooling. Having technical...
-
Security Operations Engineer
3 weeks ago
Dallas, United States Saragossa Full timeJoin a growing team and help to scale the security operations function at the technology arm of a private investment firm experiencing exponential growth.As a Security Operations Engineer, You'll be responsible for the engineering and automation of in-house security platforms including the Microsoft Sentinel SIEM and associated SOAR tooling. Having technical...
-
Security Operations Engineer
1 month ago
Dallas, United States Alcority Full timeSecurity Operations Detection Engineer Job Description: About the Role The role of Security Operations Detection Engineer reports directly to the lead of Security Operations and is part of the office of the CISO. This role is accountable for the architecture, engineering, and automation of in-house security platforms including the Microsoft Sentinel SIEM...
-
Security Operations Engineer
2 weeks ago
Dallas, Texas, United States Alcority Full timeAbout the RoleWe are seeking a highly skilled Security Operations Engineer to join our team at Alcority. As a key member of our Security Operations team, you will be responsible for designing and implementing advanced security monitoring and incident response systems.Job DescriptionIdentify and deploy new detections or automations within our SIEM/SOAR...
-
Security Operations Engineer
2 months ago
Dallas, United States Alcority Full timeSecurity Operations Detection Engineer Job Description: About the Role The role of Security Operations Detection Engineer reports directly to the lead of Security Operations and is part of the office of the CISO. This role is accountable for the architecture, engineering, and automation of in-house security platforms including the Microsoft Sentinel SIEM...
-
Security Operations Detection Engineer
3 days ago
Dallas, United States Glocomms Full timeSecurity Operations Engineer RoleAbout the Role:The Security Operations Detection Engineer reports to the lead of Security Operations and is part of the CISO office. This role is responsible for the architecture, engineering, and automation of in-house security platforms, including Microsoft Sentinel SIEM and SOAR tools. The ideal candidate will have deep...
-
Security Operations Detection Engineer
6 days ago
Dallas, United States Glocomms Full timeSecurity Operations Engineer RoleAbout the Role:The Security Operations Detection Engineer reports to the lead of Security Operations and is part of the CISO office. This role is responsible for the architecture, engineering, and automation of in-house security platforms, including Microsoft Sentinel SIEM and SOAR tools. The ideal candidate will have deep...
-
Security Operations Coordinator
3 weeks ago
Dallas, Texas, United States Marksman Security Full timeOverviewMarksman Security Corporation is a leading provider of security solutions, and we are currently seeking a highly skilled Security Command Center Operator to join our team.Job SummaryThis is a unique opportunity to work in a fast-paced 24/7 Central Command Center environment, safeguarding the assets of the facility, employees, and guests. As a...
-
Security Operations Engineer Position
3 weeks ago
Dallas, Texas, United States Alcority Full timeJob Summary:About Alcority, we are seeking a highly skilled Security Operations Engineer to join our team. The ideal candidate will have a deep understanding of Microsoft Sentinel and the ability to design and implement security automation solutions. In this role, you will be responsible for architecting, engineering, and automating in-house security...
-
dallas, United States Sunstates Security Full timeOverviewJoin one of the fastest-growing and largest privately held security companies in the U.S.! Since 1998, Sunstates Security has established a reputation for providing excellent customer service and quality work environments for its team across the country. We're committed to hiring, developing, and retaining a diverse and exceptionally qualified...
-
Security Operations Manager
3 weeks ago
Dallas, United States Sunstates Security Full timeOverviewJoin one of the fastest-growing and largest privately held security companies in the U.S.! Since 1998, Sunstates Security has established a reputation for providing excellent customer service and quality work environments for its team across the country. We're committed to hiring, developing, and retaining a diverse and exceptionally qualified...
-
Saragossa | Security Operations Engineer
3 weeks ago
dallas, United States Saragossa Full timeJoin a growing team and help to scale the security operations function at the technology arm of a private investment firm experiencing exponential growth.As a Security Operations Engineer, You'll be responsible for the engineering and automation of in-house security platforms including the Microsoft Sentinel SIEM and associated SOAR tooling. Having technical...
-
Security Operations Detection Engineer
6 days ago
Dallas, United States Glocomms Full timeWe are partnered with a major private investment firm to bring on a Security Cloud Detection Engineer out of Dallas, TX*. The ideal candidate will be responsible for enhancing their security operations through the architecture, engineering, and automation of detection and response mechanisms. This role involves working with Microsoft Sentinel SIEM, SOAR...
-
Security Operations Detection Engineer
3 weeks ago
Dallas, United States Glocomms Full timeWe are partnered with a major private investment firm to bring on a Security Cloud Detection Engineer out of Dallas, TX*. The ideal candidate will be responsible for enhancing their security operations through the architecture, engineering, and automation of detection and response mechanisms. This role involves working with Microsoft Sentinel SIEM, SOAR...
-
Security Command Center Operator
4 weeks ago
Dallas, United States Marksman Security Full timeOverview Marksman Security Corporation is hiring immediately for a Security Command Center Operator. This position oversees the daily security operations of a 24/7 Central Command Center, safeguarding the assets of the facility, employees and guests. This position will be responsible for monitoring, directing and responding to security and safety issues...
-
dallas, United States Glocomms Full timeWe are partnered with a major private investment firm to bring on a Security Cloud Detection Engineer out of Dallas, TX*. The ideal candidate will be responsible for enhancing their security operations through the architecture, engineering, and automation of detection and response mechanisms. This role involves working with Microsoft Sentinel SIEM, SOAR...
-
Security Engineer
3 weeks ago
Dallas, United States KTek Resourcing Full timeRole: Security Engineer(Azure & GCP)Location: Primary location Dallas TX, Second preference Charlotte, NC (Hybrid)Contract Role Job DescriptionAbout this role:This position will be part of a Team that performs engineering and management of data protection technologies that include Managed HSM’s, Azure key Vault and other key and secret management systems....
-
Security Operations Manager
1 week ago
Dallas, Texas, United States Digi Security Systems Full timeJob OverviewWe are seeking an experienced Installation Team Lead to join our operations in the Dallas/Fort Worth area, with a competitive salary range of $31-$45 per hour. As a key member of our team, you will be responsible for leading a team who performs skilled security technician work in the installation, service, troubleshooting, alteration and...
-
dallas, United States Career Techniques Inc. Full timeAbout the RoleThis role is accountable for the architecture, engineering, and automation of in-house security platforms including the Microsoft Sentinel SIEM and associated SOAR tooling. The ideal candidate will have deep technical expertise in the Microsoft security stack and have demonstrated excellence in the development of security automation across...
-
Network Security Engineer
2 weeks ago
Dallas, United States Diverse Lynx Full timeRole: Network Security Engineer Location: Dallas/Plano, TX- Onsite from day 1 Position Type: ContractRole Description: Role Description: • Provision and configure firewalls for customers, including Next-Generation Firewall (NGFW) devices and Zone-Based Firewalls (ZBFW) within the SD-WAN network. • Develop and maintain rule sets for firewalls. • Help...
