Security Engineer - SIEM/SOAR - Northeast region

📋 Description

• Architect, deploy, and maintain SIEM platforms (e.g., CrowdStrike, Microsoft Sentinel, Splunk
• Onboard and tune log sources across cloud (Azure, AWS, GCP), identity (Entra ID, Okta, Active
• Develop, test, and tune detection rules, correlation searches, and analytics mapped to MITRE
• Build dashboards, reports, and metrics for SOC operations, leadership, and audit/compliance needs.
• Monitor SIEM health, data quality, ingestion costs, and performance; recommend optimizations.
• Design, build, and maintain SOAR playbooks (e.g., Palo Alto XSOAR, Splunk SOAR, Sentinel

🎯 Requirements

• 3-5 years of architecture, implementation, and troubleshooting experience with one or more
• Proficiency developing log ingestion and aggregation strategies
• Expertise developing security-focused content for one or more SIEM platforms (Splunk ES
• Expertise with SOAR platforms (Splunk SOAR, Palo Alto XSOAR, Tines, Torq)
• Familiarity with key security events on common IT platforms
• Deep proficiency in client and server operating systems including Windows, Mac, and Linux

🎁 Benefits

• Remote workforce primarily (U.S. based only, some travel may be required)
• Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of premium for
• HSA contributions in 4 equal quarterly installments: ($850 per EE annually / $1750 per family
• Group Dental Insurance: GuidePoint pays 100% of premium for employees and 75% of family plans
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance