This is a fully remote position, open to applicants in United States.

📋 Description

• Design, deploy, configure, and manage security technologies across endpoint protection, EDR/MDR, SIEM, SOAR, vulnerability management, identity security, email security, security awareness, backup security, and associated integrations.

• Oversee platform health, data ingestion, agent coverage, licensing, connector status, policy drift, and service availability; examine gaps and drive issues to resolution.

• Develop and maintain SIEM detections, alert rules, enrichment logic, integrations, and automation workflows.

• Identify non-actionable, duplicate, or consistently benign alerts and suggest evidence-based tuning, correlation, allowlisting, severity adjustments, or automation while documenting security impacts and compensating controls.

• Provide advanced technical escalation support for security tools, failed deployments, integration challenges, telemetry gaps, and intricate client environments.

• Collaborate with SOC operations to translate incident and alert trends into engineering enhancements, including new detections, response actions, automation, and platform fortification.

• Coordinate with clients, internal service teams, and vendors to convey requirements, implementation plans, risks, dependencies, status, and technical outcomes.

• Engage in implementation reviews, troubleshooting sessions, operational handoffs, and service-improvement initiatives.

• Respond to events and alerts and address issues.