Security Operations Engineer

Security Operations Engineer: Responsibilities: - Design, deploy, and maintain EDR, security telemetry, and SIEM platforms. - Build and manage security data pipelines to collect, normalize, enrich, and route logs from enterprise, cloud, application, and security sources. - Develop SIEM correlation rules, alerts, dashboards, and detection content. - Support threat detection, threat hunting, incident response, and forensic investigations. - Monitor platform health and data ingestion, and resolve data quality issues. - Integrate new data sources and automate SecOps workflows and reporting. - Define standards and procedures for security monitoring and telemetry management. Skills: - Must have: SIEM engineering (Splunk, Microsoft Sentinel, QRadar or similar), EDR (CrowdStrike, Defender for Endpoint, SentinelOne), log pipelines and parsing (Cribl, Logstash, Fluentd), detection engineering, incident response, scripting (Python or PowerShell). - Nice to have: SOAR, KQL/SPL, MITRE