Description
GuidePoint Security is looking for a skilled Senior Security Engineer to support the implementation, optimization, and operational support of security operations technologies and workflows.
The Senior Security Engineer will engage in the development of security telemetry pipelines, SIEM detection content, and security automation while providing 'Wow Them' service to clients, internal customers, and co-workers.
Key responsibilities include:
SIEM Engineering
- Architect, deploy, and maintain SIEM platforms, including data ingestion, parsing, normalization, and retention.
- Onboard and tune log sources across cloud, identity, endpoint, network, email security, SaaS, and line-of-business applications.
- Develop, test, and tune detection rules, correlation searches, and analytics mapped to MITRE ATT&CK.
- Build dashboards, reports, and metrics for SOC operations, leadership, and audit/compliance needs.
- Monitor SIEM health, data quality, ingestion costs, and performance.
SOAR Engineering and Automation
- Design, build, and maintain SOAR playbooks for triage, enrichment, containment, and case management.
- Integrate security and IT tools via APIs.
- Automate high-volume use cases such as phishing response, account compromise, and malware triage.
- Establish version control, testing, and change-management practices for detections and playbooks.
- Measure and report automation impact.
Collaboration and Governance
- Partner with SOC analysts, incident responders, threat hunters, and threat intelligence.
- Work with IT, cloud, and application teams to ensure appropriate logging and onboarding standards.
- Support client-facing security questionnaires, audits, and assessments.
- Maintain clear documentation.
- Participate in on-call or after-hours support rotation.
The ideal candidate will have:
Required Experience and Education
- 5+ years of architecture, implementation, and troubleshooting experience with one or more SIEM/SOAR solutions.
- Proficiency developing log ingestion and aggregation strategies.
- Expertise developing security-focused content for one or more SIEM platforms.
- Expertise with SOAR platforms.
- Familiarity with key security events on common IT platforms.
- Deep proficiency in client and server operating systems.
- Scripting and development skills.
Preferred Experience and Education
- Experience with platforms such as Ansible, Puppet, Chef, Terraform, and SaltStack.
- Experience with other Information Security solutions.
- Experience authoring security runbooks, policy, and best practice documentation.
GuidePoint Security offers a range of benefits, including:
- Remote workforce primarily.
- Group Medical Insurance options.
- Group Dental Insurance.
- 12 corporate holidays and a Flexible Time Off (FTO) program.
- Healthy mobile phone and home internet allowance.
- Eligibility for retirement plan after 2 months at open enrollment.
- Pet Benefit Option.