Security Operations Engineer

To support the ongoing transformation of the organization's Security Operations & Incident Response program, the contracted Security Operations Engineer will drive operational delivery excellence, conduct deep dive investigations, and develop incident response playbooks while working remotely from the USA or Canada. Key responsibilities Provide expert-level support for digital forensics investigations, including memory, network, and malware analysis Author and refine incident response playbooks and operational guidelines to adapt to evolving cybersecurity threats Design and implement complex detection rules and automated remediation workflows to identify and mitigate adversarial behavior Required qualifications Bachelor's degree and 5+ years of relevant experience in incident response and SOC tooling In-depth knowledge of SIEM/SOAR platforms and incident response processes in hybrid cloud environments Experience leading incident response as incident commander and performing root cause analysis Familiarity with scripting languages such as Python, PowerShell, Bash, or XQL Understanding of regulatory compliance frameworks like MITRE ATT&CK, NIST, or ISO