SecOps Engineer, North Central Region

This is a fully remote position, open to applicants in United States.

📋 Description

• Execute, oversee, and enhance cybersecurity systems and data pipelines with guidance from senior engineering leadership

• Set up and assist in the ingestion of security telemetry into SIEM platforms utilizing agents, APIs, syslog, and native integrations

• Implement parsing and field extraction techniques using regex, JSON, and key-value methods

• Standardize data into uniform schemas such as CIM, ECS, and UDM

• Ensure field completeness, consistency, and accuracy of timestamps

• Design and refine SIEM detection rules and align detections with MITRE ATT&CK

• Test and verify detection logic, pinpoint coverage gaps, and minimize false positives

• Assist with SIEM configuration, upkeep, troubleshooting, and performance enhancement

• Monitor data pipelines to identify ingestion or processing failures

• Create and sustain SOAR playbooks

• Facilitate integrations with SIEM, endpoint, and cloud platforms

• Automate enrichment and response workflows

• Resolve playbook failures and integration challenges

• Engage in client interviews and technical discovery sessions

• Document existing architectures and workflows

• Evaluate SOC processes, detection coverage, and data architecture

• Contribute to client findings, suggestions, and deliverables

⛳️ Requirements

• High school diploma with 5 years of experience or a BS/BA with 2 years of experience

• 2–5 years of experience in security operations, SIEM engineering, or related domains

• Practical experience with at least one SIEM platform

• Familiarity with detection engineering or SOC workflows

• Experience handling log data and security telemetry

• Strong analytical and problem-solving capabilities

• Proficient in troubleshooting technical issues across various systems

• Excellent written and verbal communication abilities

• Capability to operate in a client-facing consulting setting

• Strong documentation and organizational skills

• Willingness to embrace emerging technologies, including AI tools

• SIEM vendor certifications (e.g., Splunk, Google SecOps, Elastic), SOAR vendor certifications, and observability vendor certifications

🏝️ Benefits

• Primarily remote workforce (U.S. based only; some travel may be necessary for specific roles, and on-site work may be required for Federal positions)

• Group Medical Insurance options: Zero Deductible PPO Plan; GuidePoint covers 90% of the premium for employees and 70% for family plans, or a High Deductible Health Plan with HSA; GuidePoint pays 100% of employees' premiums and 75% for family plans

• HSA contribution of $850 per employee annually or $1750 per family annually

• Group Dental Insurance; GuidePoint pays 100% of the premium for employees and 75% for family plans

• 12 corporate holidays

• Flexible Time Off (FTO) program

• Healthy mobile phone and home internet allowance

• Eligibility for a retirement plan after 2 months during open enrollment

• Pet Benefit Option

• Opportunities for collaboration, mentorship, and guidance

• Up to 10% travel