SOC L2/L3 Engineer

📋 Description

• Build and deploy the SIEM from PoC to production with UEBA and case management.
• Design, write, and tune MITRE ATT&CK-aligned detection rules.
• Triage L2/L3 alerts; reduce false positives; define escalation paths.
• Lead incident response and forensics: containment, eradication, and lessons learned.
• Onboard log sources across AWS, JumpCloud, Google Workspace, SWIFT.

🎯 Requirements

• 3+ years in SOC / Detection & Response at L2/L3.
• Practical experience building/operating a SIEM and tuning rules.
• MITRE ATT&CK mapping; comfortable with KQL, SPL, or equivalents.
• Experience investigating cloud logs: AWS CloudTrail, GuardDuty, Google Workspace, EDR/XDR.
• Scripting and automation skills (Python or similar).
• Strong threat understanding; attacker techniques evidenced in logs.

🎁 Benefits

• 30+ days off and unlimited sick leave.
• Health coverage and Apple gear to keep you productive.
• Free office meals and wellness benefits.
• Courses, conferences, and sports programs.
• Referral bonus program for new hires.