Security Engineer - II (SOC)

About Tekion

Role Summary

Responsibilities

• Provide continuous alert monitoring and response coverage on rotating night, weekend, and holiday shifts.
• Investigate alerts from SIEM, EDR, cloud, network, and identity sources and escalate confirmed incidents.
• Tune alert logic, build detection rules aligned to MITRE ATT&CK, and improve detection coverage.
• Build AI-agent and SOAR workflows for alert triage, enrichment, containment, and response.
• Track SOC metrics such as MTTD, MTTR, alert volume, false-positive rates, and automation coverage.
• Participate in incident response, containment, root-cause analysis, post-incident reviews, and lessons learned.
• Maintain security tools, monitoring systems, access controls, documentation, runbooks, and playbooks.
• Support vulnerability management, compliance activities, threat modeling, and risk assessments.
• Collaborate with IT and Engineering to improve telemetry, logging, and security practices.
• Provide guidance and mentorship to junior engineers and analysts.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Engineering, or a related field; equivalent experience may be considered.
• 4–6 years of experience in security operations, security engineering, incident response, or related roles.
• Ability to work rotating 24x7 shifts, including nights, weekends, and holidays.
• Hands-on SOC experience with alert triage, investigation, and incident response.
• Experience building and tuning SIEM or EDR detections and reducing false positives.
• Experience with SOAR platforms and automated playbooks; AI-agent or LLM automation exposure is preferred.
• Knowledge of network, application, cloud security, security tools, cloud platforms, and security frameworks.
• Python, Bash, or equivalent scripting experience is preferred.
• CISSP, GCIA, GCIH, GSEC, or CEH certification is preferred.