Security Engineer (SIEM/SOAR) - Northeast region (Remote)
Remote · United States
Job Summary
Security Engineer (SIEM/SOAR) role focused on Northeast region with remote work options. Will design and implement SIEM/SOAR solutions, develop log ingestion strategies, create complex threat detection logic and dashboards across platforms such as Splunk ES, Microsoft Sentinel, Elastic Security, and others, and work with SOAR tools including Splunk SOAR, XSOAR, Tines, and Torq. Requires strong OS proficiency across Windows, Mac, Linux; networking troubleshooting; scripting in BASH/Perl/Python; ability to manage multiple projects independently. Preferred background includes experience with automation/configuration tools and security runbooks; bachelor’s degree or equivalent professional experience. Remote work primarily US-based with occasional travel; some positions may require on-site work for Federal roles.
Required Qualifications
- 3-5 years of architecture, implementation, and troubleshooting experience with one or more SIEM/SOAR solutions
- Proficiency developing log ingestion and aggregation strategies
- Expertise developing security-focused content for one or more SIEM platforms (Splunk ES, CrowdStrike NG-SIEM, Elastic Security, Palo Alto XSIAM, Google SecOps, Microsoft Sentinel, SentinelOne AI SIEM) including creation of complex threat detection logic and operational dashboards
- Expertise with SOAR platforms (Splunk SOAR, Palo Alto XSOAR, Tines, Torq)
- Familiarity with key security events on common IT platforms
- Deep proficiency in client and server operating systems including Windows, Mac, and Linux
- General networking and security troubleshooting (firewalls, routing, NAT, etc.)
- Scripting and development skills (BASH, Perl, Python or Java) with strong knowledge of regular expressions
- Ability to autonomously prioritize and successfully deliver across a portfolio of projects
- Bachelor’s degree in a relevant discipline or equivalent professional experience
Apply with one swipe on Sorce. We auto-fill applications and apply on your behalf — no cover letters, no 40-minute forms.
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.