Senior Cyber Security Engineer

Job Description

The Senior Cyber Security Engineer is a senior technical leader within the Security Operations function, responsible for advanced analytics, complex investigations, tool engineering, and driving SOC capability maturity. This role proactively identifies and responds to sophisticated threats, advances detection capabilities, and guides the SOC toward higher automation, intelligence-driven operations, and continuous improvement aligned with industry best practices and Gartner L4 maturity.

JOB DUTIES:

• Continuously assess emerging threats and evaluate SOC tools, architectures, and workflows for improvement
• Recommend and implement standardized, scalable approaches for SOC technologies and processes
• Develop and enhance SLAs, KPIs, and operational reporting for security tooling and SOC effectiveness
• Maintain and enhance SOC policies, documentation, and procedures
• Lead identification, investigation, and remediation of advanced security events and incidents
• Ensure audit trails and evidence-handling standards support incident investigation and regulatory requirements
• Develop cybersecurity policies and DLP standards aligned with organizational risk posture
• Manage and investigate data-loss events to ensure risks are mitigated
• Execute and enforce security policy, exception management, and risk controls
• Provide Tier 3 technical escalation support for SOC incidents and engineering issues
• Collaborate closely with architecture, network, data center, HR, Legal, and third parties during investigations
• Lead and contribute to complex cybersecurity and SOC modernization projects
• Mentor and develop SOC engineers and analysts to strengthen capabilities
• Provide leadership input into planning, deployment, and optimization of new and existing security initiatives
• Lead SIEM, SOAR, and XDR engineering, correlation rule development, and detection content optimization
• Drive automation design and orchestration to increase SOC efficiency and reduce response times
• Lead deep-dive threat hunting, hypothesis-driven investigations, and adversary simulation
• Guide cloud-native security monitoring and detection engineering.

YOU MUST HAVE:

• Minimum 5 years of cybersecurity or SOC experience
• Excellent documentation and communication skills
• Certifications: GSEC, Security+, CISSP (preferred or in progress)
• Deep understanding of network protocols, IDS/IPS, SIEM, firewalls, proxies, and DLP technologies
• Strong understanding of incident response frameworks and advanced threat actor behaviors
• Strong English communication skills (verbal and written)
• Ability to prioritize in a dynamic, fast-paced environment

WE VALUE:

• Experience with modern SOC engineering (SOAR automation, XDR implementation, cloud monitoring)
• Strong experience developing detection rules, tuning alerts, and engineering log ingestion pipelines
• Proven ability to lead investigations involving advanced persistent threats (APTs)
• Additional certifications (GCIA, GCFE, GDAT, GCTI, etc.)
• Ability to lead and influence across teams and stakeholders
• Strong adaptability, decision-making, and urgency in high-pressure environments, with exceptional communication, collaboration, and mentorship abilities
• Ability to absorb and apply new technologies quickly

WHAT'S IN IT FOR YOU:

• Hybrid Working
• Health Insurance Coverage - comprehensive care for you and your family.
• Employee Assistance Program (EAP) - confidential service which equips and supports you as you meet life's challenges.
• Education Assistance - we invest in your growth so you can keep learning and thriving.
• Maternity & Paternity Leave - because family always comes first.
• Menstrual Wellness Benefit - benefit for women employees
• Bereavement Leave - time to be with loved ones when it matters most

#LI-JR2

#LI-HYBRID

About Us

Resideo Technologies has announced its intention to spin off ADI Global Distribution and establish it as a separate, publicly traded company. Under this plan, ADI will continue its role as a leading global wholesale distributor serving commercial and residential markets, while Resideo will retain its manufacturing and product-solutions business. Upon separation, both companies will operate independently to better serve their respective markets and customers. The spin-off is currently targeted for completion in the second half of 2026, subject to customary conditions.

Resideo is a $6.76 billion global manufacturer, developer, and distributor of technology-driven sensing and control solutions that help homeowners and businesses stay connected and in control of their comfort, security, energy use, and smart living. We focus on the professional channel, serving over 100,000 contractors, installers, dealers, and integrators across the HVAC, security, fire, electrical, and home comfort markets. Our products are found in more than 150 million residential and commercial spaces worldwide, with tens of millions of new devices sold annually. Trusted brands like Honeywell Home, First Alert, and Resideo power connected living for over 12.8 million customers through our Products & Solutions segment. Our ADI | Snap One segment spans 200+ stocking locations in 17 countries, offering a catalog of over 500,000 products from more than 1,000 manufacturers. With a global team of more than 14,000 employees, we offer the opportunity to make a real impact in a fast-growing, purpose-driven industry. Learn more at

At Resideo, we bring together diverse individuals to build the future of homes. Resideo is an equal opportunity employer. Qualified applicants will be considered without regard to age, race, creed, color, national origin, ancestry, marital status, affectional or sexual orientation, gender identity or expression, disability, nationality, sex, religion, or veteran status. For more information on applicable U.S. equal employment regulations, refer to the "EEO is the Law" poster, "EEO is the Law" Supplement Poster and the Pay Transparency Nondiscrimination Provision. Resideo complies with applicable equal employment laws in all countries where we do business. For more information on how we process your information in the job application process, please refer to Recruitment Privacy Notice. If you require a reasonable accommodation to apply for a job, please use Contact Us form for assistance.