Security Operations Engineer

Owning the daily operation and continuous improvement of Alpaca's SIEM and SOAR capabilities, the full-time remote Security Operations Engineer will onboard security logs, develop and tune detections, maintain operational dashboards, and automate response actions. Key responsibilities Onboard new security log sources and ensure data quality through parsing and normalization Build, test, and tune detection rules based on threat intelligence and incident learnings Support security incidents by collecting evidence, running detection queries, and implementing containment actions Required qualifications 3+ years of experience in Security Operations or detection engineering roles Hands-on experience operating and tuning a SIEM Experience building SOAR playbooks or equivalent response automation Strong alert investigation skills across identity, endpoint, network, and cloud environments Experience onboarding and parsing log sources from cloud, identity, and SaaS platforms