Senior Security Engineer

Akkodis is seeking a Sr. Security Operations Engineer for one of our clients in Charlotte, NC.

Rate Range: $65.00 to $73.00/hour; the rate may be negotiable based on experience, education, geographic location, and other factors.

The Senior Security Operations Engineer is a hands-on technical leader responsible for protecting personnel, enterprise systems, cloud environments, applications, engineering platforms, and business operations. This position serves as a senior escalation resource for security monitoring and incident response while helping mature security operations capabilities, processes, and technologies.

The ideal candidate combines deep technical expertise with strong communication skills, investigative rigor, and a proactive approach to improving threat detection, response, automation, and operational effectiveness.

This role is onsite daily.

Key Responsibilities

• Lead complex security investigations from initial alert validation through containment, eradication, recovery, documentation, and lessons learned.
• Serve as a senior escalation point for security alerts across endpoint, identity, email, cloud, SaaS, and network environments.
• Partner with managed detection and response providers to ensure effective monitoring, triage, escalation, documentation, and incident handoff.
• Participate in an on-call rotation and respond to critical security incidents outside normal business hours as needed.
• Develop, tune, test, and maintain detection rules, threat-hunting queries, dashboards, watchlists, automation workflows, and investigation content using Kusto Query Language (KQL).
• Build and enhance security orchestration and automation processes that improve investigation efficiency and accelerate response activities.
• Conduct proactive threat hunting using threat intelligence, indicators of compromise, attacker behaviors, and security telemetry.
• Administer and optimize Microsoft security technologies, including Microsoft Sentinel, Microsoft Defender XDR, Defender for Endpoint, Defender for Office 365, Defender for Identity, and Microsoft Entra ID security capabilities.
• Investigate and coordinate response activities across security tools such as Zscaler, Abnormal Security, Wiz, PagerDuty, Jira, Freshservice, and related security platforms.
• Create and maintain incident response playbooks, investigation procedures, escalation processes, and operational documentation.
• Collect, preserve, and analyze digital evidence while supporting endpoint and cloud forensic investigations.
• Collaborate with IT Operations, IAM, Cloud Engineering, DevSecOps, GRC, Legal, Privacy, HR, Physical Security, Communications, and business stakeholders during incidents and security initiatives.
• Support vulnerability and zero-day response efforts by assessing exposure, coordinating remediation, tracking risk, and communicating status updates.
• Correlate exposure and cloud security findings with asset context, active threats, and business impact to drive remediation priorities.
• Prepare incident reports, executive summaries, operational metrics, and post-incident reviews for technical and leadership audiences.
• Mentor analysts and team members while promoting best practices and technical excellence across security operations.
• Continuously improve detections, controls, playbooks, automation, logging, and response readiness based on lessons learned.
• Participate in tabletop exercises, purple-team engagements, detection validation, and other security readiness activities.

Required Qualifications

• 5+ years of experience in security operations, incident response, threat detection, digital forensics, security engineering, or a related discipline.
• Proven ability to lead complex technical investigations and make effective decisions in dynamic environments.
• Hands-on experience with modern SIEM and EDR/XDR platforms, with strong expertise in Microsoft Sentinel and Microsoft Defender preferred.
• Proficiency with KQL or comparable query languages for detection engineering, threat hunting, log analysis, and dashboard development.
• Experience investigating identity, endpoint, email, cloud, SaaS, and network security events, including phishing, account compromise, malware, ransomware, insider threats, data loss, and third-party risks.
• Working knowledge of Microsoft Entra ID, Microsoft 365 security, Azure, and AWS security services.
• Experience with incident and case management platforms such as PagerDuty, Jira, Freshservice, Teams, and Confluence.
• Understanding of security automation, orchestration, APIs, scripting, and workflow development.
• Experience with PowerShell, Python, JSON, Logic Apps, or similar automation technologies.
• Knowledge of vulnerability management, security exposure management, cloud security posture management, and risk-based remediation.
• Familiarity with forensic investigation processes, evidence preservation, timeline analysis, and investigative reporting.
• Strong written and verbal communication skills with the ability to explain technical findings to both technical and non-technical audiences.
• Strong documentation practices, attention to detail, and commitment to repeatable and auditable processes.
• Ability to work onsite in Charlotte, NC and participate in an on-call rotation that includes evenings, weekends, and holidays.
• Experience implementing agentic or AI-driven capabilities within a Security Operations Center (SOC).

Preferred Qualifications

• Experience supporting security operations within high-growth, manufacturing, engineering, automotive, or technology environments.
• Experience working with MDR, MXDR, MSSP, or managed security service providers.
• Hands-on experience with Zscaler, Abnormal Security, Wiz, cloud workload protection, DLP, threat intelligence, or malware analysis platforms.
• Experience designing and optimizing SOAR playbooks, Logic Apps, API integrations, and AI-assisted investigation workflows.
• Experience supporting tabletop exercises, major incident response, crisis management activities, and post-incident improvement programs.
• Relevant certifications such as CISSP, GCIH, GCIA, GCFA, GNFA, SC-200, AZ-500, Security+, or equivalent demonstrated expertise.

Education

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field.

If you are interested in this role, then please click APPLY NOW. For other opportunities available at Akkodis go to

Equal Opportunity Employer/Veterans/Disabled

Benefit offerings available for our associates include medical, dental, vision, life insurance, short-term disability, additional voluntary benefits, EAP program, commuter benefits and a 401K plan. Our benefit offerings provide employees the flexibility to choose the type of coverage that meets their individual needs. In addition, our associates may be eligible for paid leave including Paid Sick Leave or any other paid leave required by Federal, State, or local law, as well as Holiday pay where applicable.

To read our Candidate Privacy Information Statement, which explains how we will use your information, please visit:

The Company will consider qualified applicants with arrest and conviction records in accordance with federal, state, and local laws and/or security clearance requirements, including, as applicable:

The California Fair Chance Act

Los Angeles City Fair Chance Ordinance

Los Angeles County Fair Chance Ordinance for Employers

San Francisco Fair Chance Ordinance