Security Operations Engineer

To support the ongoing transformation of the organization's Security Operations & Incident Response program, an experienced Engineer - SOC & IR will work remotely on a contracted basis, focusing on deep dive investigations, authoring incident response playbooks, and developing threat models to enhance cybersecurity resilience. Key responsibilities Provide expert-level support for digital forensics investigations, including memory, network, and malware analysis Author and refine incident response playbooks and operational guidelines to adapt to evolving threats Design and implement complex detection rules and automated remediation workflows to identify adversarial behavior Required qualifications Bachelor's degree and 5+ years of relevant experience in incident response and SOC tooling In-depth knowledge of SIEM/SOAR platforms and incident response processes in hybrid cloud environments Experience leading incident response as incident commander and performing root cause analysis Familiarity with scripting languages such as Python, PowerShell, Bash, or XQL Understanding of regulatory compliance frameworks such as MITRE ATT&CK, NIST, or ISO