Senior MSIAM SOC Engineer – Unit 42

This is a fully remote position, open to applicants in North Carolina.

📋 Description

• Continuously enhance correlation rules to guarantee that detection logic aligns with performance, accuracy, and operational relevance standards.

• Convert Unit 42 threat intelligence research and emerging adversary tactics, techniques, and procedures (TTPs) into practical detection logic.

• Develop advanced automation playbooks to tackle emerging security challenges and streamline operational workflows.

• Structure the comprehensive security lifecycle within Cortex XSIAM.

• Integrate data ingestion, high-fidelity detection engineering, and response automation.

• Assess and provide optimization suggestions for detection logic created by others.

• Assist enterprise clients in navigating intricate architectural and workflow decisions.

• Collaborate remotely across different regions in a hybrid team setting.

⛳️ Requirements

• Over 5 years of practical experience in a Senior SOC, Detection Engineering, or Security Architecture position.

• Proficiency in utilizing SIEMs, firewalls, EDR, sandboxes, and SOAR platforms.

• Expertise in the Detection Engineering lifecycle.

• Familiarity with rule testing frameworks, soft-deployment strategies, and continuous tuning methodologies.

• Experience in reviewing and quality-assuring detection logic authored by others.

• Background in designing intricate automation playbooks, ideally using Cortex XSOAR or similar tools.

• Solid foundation in incident response and threat hunting.

• Capability to translate threat intelligence into actionable defensive strategies.

• Software development experience with a strong command of Python for security automation.

• Outstanding consultative and communication abilities.

• Capacity to assist enterprise customers in navigating complex architectural and workflow decisions.

• Prior experience with Cortex XSIAM is preferred.

• Candidates must not need immigration sponsorship; this position does not provide work visa sponsorship.

🏝️ Benefits

• Restricted stock units may be offered.

• Bonuses may be included.

• Employee benefits are available; further details can be found in the employer’s benefits documentation.

• Reasonable accommodations will be made for qualified individuals with disabilities or special needs.