SOC Detection & Automation Engineer III
USD 129K-155K (estimate) Senior-level Full Time
Tasks
- Analyze security events determine impact
- Collaborate cross functional teams on automation opportunities
- Conduct incident triage root cause scope analysis
- Design automate SOC workflows
- Design develop maintain Microsoft Sentinel detection logic
- Develop deploy automated scripts tools correlation policies
- Execute incident containment and mitigation
- Implement detection as code with version control
- Integrate security technologies using APIs
- Manage Microsoft Sentinel data connectors log ingestion
- Oversee automation initiatives and prioritize tasks
- Perform detection coverage gap analysis using MITRE ATT&CK
- Prepare incident reports and recommendations
- Translate threat intelligence into detection rules
- Tune SIEM detection rules reduce false positives
Perks/Benefits
Skills/Tech-stack
800-37 | 800-53 | Azure Logic | Azure Logic Apps | Bash | Cloud apps | Containerization | Data Connectors | Defender Suite | Defender for | Defender for Cloud | Defender for Cloud Apps | Defender for Endpoint | Defender for Identity | Detection engineering | Detection-as-code | HIPAA | Incident Response | Intrusion Detection | Intrusion Detection System | Intrusion Prevention | Intrusion Prevention System | KQL | Kusto Query | Kusto Query Language | Log Ingestion | Log normalization | Logic Apps | MITRE ATT&CK | Microsoft Defender | Microsoft Defender Suite | Microsoft Graph | Microsoft Graph Security API | Microsoft Sentinel | NIST SP | NIST SP 800 | NIST SP 800-115 | NIST SP 800-37 | NIST SP 800-53 | NIST SP-800-30 | Network Security | Networking | PCI DSS | Playbook Orchestration | Powershell | Project Management | Python | Query Language | REST APIs | SIEM | SOAR | SOAR playbooks | SP 800-115 | SP 800-30 | SP 800-37) | SP 800-53 | Security API | Shodan | Threat Intelligence | Threat hunting | Version control | Virtualization | VirusTotal | “as-code”
Education
Bachelor of Computer Science | Bachelor of Engineering | Bachelor of Science | Bachelor of Science in Computer Engineering | Bachelor of Science in Cybersecurity | Bachelor of Science in Information Systems | Bachelor of Science in Information Technology | Bachelor of Science in Software Engineering
Related jobs
-
Security Operations Manager USD 150K-190KAnti-Malware | Anti-virus | Asset Management | Asset discovery | CASBSenior-level Full TimeWork from home, VA, United States R8h ago
-
Senior-level Full TimeFairfax, VA, United States R8h ago
-
Head of Cyber Defense USD 150K-175KAWS | Agentic AI | Automation | Azure | Cloud platform401k match | Cell phone reimbursement | Dental insurance | Health insurance | Top of the line equipmentExecutive-level Full Timeremote, NY, US R10h ago
-
DevSecOps Product Engineer USD 137K-244KAWS CloudFormation | Ansible | Build & Release | CI/CD | ContainerizationDisability insurance | Health insurance | Holiday pay | Learning and development | Life insuranceSenior-level Full TimeUSA-Remote Work R11h ago
-
DevSecOps Platform Engineer USD 105K-177KAWS CloudFormation | Amazon Web Services | Ansible | Bourne Shell | CI/CDDisability insurance | Health insurance | Holiday pay | Learning and development | Life insuranceMid-level Full TimeUSA-Remote Work R11h ago
-
Senior Solution Consultant USD 110K-195KAWS | Active Directory | Azure | Cloud services | Data Loss PreventionFlexible work hours | Medical, dental, and vision coverage | Paid parental leave | Paid time off | Retirement plansSenior-level Full TimeRemote United States, United States R1d ago
-
Junior Cybersecurity Integration Systems Engineer USD 57K-104KCybersecurity | Networking | Networking Risk Assessments | Requirements Reviews | Risk AssessmentAbility to obtain Secret clearance | Fully remoteEntry-level Full Time6314 Remote/Teleworker US, United States R1d ago
-
Software Security Engineer USD 103K-166KAmazon Web Services | Artificial Intelligence | Automation | Cloud Computing | Cloud platformEmployee stock purchase plan | Flexible paid time off | Growth and development fund | Home office support | Parental leaveSenior-level Full TimeRemote, Canada; Remote, US R1d ago
-
Sr. Embedded Detection Analyst USD 140K-207KAI tools | Alert Correlation | Cause analysis | Data Analysis | Detection engineeringSenior-level Full TimeRemote - USA R1d ago
-
Senior Cybersecurity Engineer, Advanced Security USD 145K-204KAPI Security | AWS | Azure | BGP | BGP RoutingSenior-level Full TimeRemote, United States R1d ago
-
Senior Cybersecurity Platform Engineer USD 99K-192KABAC | AI Security | AI threat modeling | AWS | Access ControlEmployee resource groups | Flexible family care days | Paid Holidays | Paid parental leave | Paid time offSenior-level Full TimeUnited States R1d ago
-
Security Solutions Principal - AI Security USD 170K-200KAI RMF | AI Security | API Security | AWS | Access Management401k plan with company matching | Employee assistance program | Employee discount program | Health, dental, vision insurance | Life and disability insuranceSenior-level Full TimeRemote - Nationwide, United States R1d ago
-
Security Solutions Manager – Micro-Segmentation USD 150K-170KAccess Management | Cisco Secure | Cisco Secure Workload | Data Protection | Enterprise segmentation401k plan | Bereavement leave | Disability insurance | Employee assistance program | Employee discount programMid-level Full TimeRemote - Nationwide, United States R1d ago
-
Cloud Security Engineer (Hybrid/Miami Lakes) USD 112K-179KAWS | Access Control | Azure | Compliance | DLPSenior-level Full TimeMiami Lakes, FL, United States R1d ago
-
Senior Systems Engineer USD 115K-138KAWS | Active Directory | Azure | Azure AD | Backup and RecoveryOccasional evening support | Occasional weekend support | Remote work | Training and mentoringSenior-level Full TimeUnited States R1d ago
-
Security Analyst II (Weekday Afternoons) USD 77K-97KAlert triage | Cloud Identity | EDR | Email Security | Google SecOps401k retirement plan | Dental insurance | Disability insurance | Flexible time off | Medical insuranceMid-level Full TimeTampa, FL Hybrid R1d ago
-
SOC Supervisor USD 110K-115KAlert triage | Audit Readiness | Automation | Case management | Cause analysisCommuter benefits | Employee Assistance Program (EAP) | Flexible Spending Account (FSA) | Floating holidays | Health Savings Account (HSA)Mid-level Full TimeRemote, USA R1d ago
-
Senior Software Engineer, AI/LLM USD 202K-227KAPI Development | API Orchestration | Automated testing | Best practices | CI/CDFlexible PTO | Health, dental, vision coverage | Mental health & wellness benefits | Parental leave | Professional development stipendSenior-level Full TimeRemote (US/Canada) R1d ago
-
Senior Threat Response Engineer, Security Operations USD 159K-235KComputer forensics | Detection and Response | Endpoint Detection and Response | Endpoint detection | Incident Response401k matching | Basic life insurance | Commuter benefits | Dental benefits | Disability insuranceSenior-level Full TimeUnited States - Remote R1d ago
-
Senior Cybersecurity Consultant USD 104K-195K800-53 | AWS | Access Management | Adversary Emulation | Application SecuritySenior-level Full TimeRemote (United States) R1d ago
-
Executive-level Full TimeLos Angeles, California R1d ago
-
Senior-level Full TimeReston, VA - Remote R1d ago
-
Senior Sales Engineer USD 140K-200KAPI | AWS | Azure | Bash | CRM401k employer match | Career growth opportunities | Company issued laptop | Flexible schedule | Health benefitsSenior-level Full TimeUnited States R1d ago
-
Cybersecurity Architect Engineer USD 130K-222KAzure Architecture | CI/CD | Cloud Migration | Compliance | Containers401k match | Annual performance reviews | Disability insurance | Healthcare coverage | Life insuranceSenior-level Full TimeQuantico, VA, United States R1d ago
-
Senior Security Engineer USD 132K-182KData Normalization | Detection engineering | KQL | Log Ingestion | Microsoft SentinelFederal holidays off | Flexible PTO | Hybrid work | Professional development support | Tuition reimbursementSenior-level Full TimeWashington, D.C. Metro - hybrid/remote R1d ago