Security Engineer - SIEM/SOAR - Northeast region

A SIEM and SOAR engineer in GuidePoint Security's Northeast SecOps practice who builds and runs detection and response platforms for clients. The engineer deploys and maintains SIEMs such as Sentinel, Splunk, CrowdStrike and Google SecOps, onboards cloud, identity, endpoint and SaaS logs, writes and tunes ATT&CK-mapped detections, builds SOC dashboards, creates SOAR playbooks for phishing, account compromise and malware triage, sets up detection-as-code practices, and supports audits and an on-call rotation.

GuidePoint wants three to five years architecting and troubleshooting SIEM and SOAR tools, strong detection content skills, SOAR platforms such as XSOAR, Splunk SOAR, Tines or Torq, solid OS and networking knowledge, and scripting with regular expressions. Travel is up to 10 percent; no visa sponsorship.