SOC Security Engineer

Role overview

Security engineering

• Design, develop, and maintain SOC platforms and tooling focused on SIEM, SOAR, and security automation.
• Develop Python services, scripts, automation workflows, and integrations with SIEM, EDR, AWS, and internal platforms.
• Build and maintain AWS security services using EC2, S3, Lambda, IAM, and CloudWatch.

Detection and incident response

• Support log ingestion, parsing, normalization, correlation, and detection rule development.
• Develop detection use cases and threat models based on attack scenarios and real-world incidents.
• Participate in SOC on-call rotation and incident response, including alert triage, investigation, containment, and post-incident analysis.
• Collaborate with SOC analysts and security teams to improve automation, detection coverage, and platform capabilities.

Requirements

• Hands-on Python development experience is required.