Security Operations Engineer

Working remotely on a full-time basis, the Security Operations Engineer will triage, investigate, and respond to security alerts while continuously improving detections and automations to enhance the organization's security posture. Key responsibilities Triage, investigate, and respond to security alerts across endpoints, cloud infrastructure, and network telemetry Automate repetitive workflows and utilize AI to enhance speed, scale, and effectiveness in security operations Execute containment and remediation actions for confirmed incidents, continuously improving established runbooks Required qualifications 3+ years of experience in security operations, detection and response, or a related security engineering role Experience investigating and responding to security threats across endpoints, cloud environments, and network telemetry Hands-on experience with SIEM and EDR platforms, including tuning detections to improve signal quality Ability to apply threat intelligence, including IOCs and TTPs, to investigations and proactive monitoring Prepared to participate in an on-call rotation and document incidents clearly for continuous improvement