SecOps Engineer - North Central region (Remote in the U.S.)

A security operations engineer in GuidePoint Security's North Central SecOps practice, which helps clients build and run the tools they use to detect, investigate and respond to threats. Across several client environments, the engineer onboards security telemetry into SIEM platforms, writes parsing and normalisation logic, builds and tunes detection rules to cut false positives and close coverage gaps, maintains SIEM and SOAR integrations and workflows, documents current-state architectures and SOC processes, and adds to the practice's reusable detection content.

GuidePoint wants two to five years in security operations, SIEM or detection engineering, hands-on time with at least one enterprise SIEM, basic Python or PowerShell, and a query language such as SPL or KQL. Travel is up to 10 percent; no visa sponsorship.