Security Engineer - SIEM/SOAR - Northeast region

📋 Description Architect, deploy, and maintain SIEM platforms (e.g., CrowdStrike, Microsoft Sentinel, Splunk Onboard and tune log sources across cloud (Azure, AWS, GCP), identity (Entra ID, Okta, Active Develop, test, and tune detection rules, correlation searches, and analytics mapped to MITRE Build dashboards, reports, and metrics for SOC operations, leadership, and audit/compliance needs. Monitor SIEM health, data quality, ingestion costs, and performance; recommend optimizations. Design, build, and maintain SOAR playbooks (e.g., Palo Alto XSOAR, Splunk SOAR, Sentinel 🎯 Requirements 3-5 years of architecture, implementation, and troubleshooting experience with one or more Proficiency developing log ingestion and aggregation strategies Expertise developing security-focused content for one or more SIEM platforms (Splunk ES Expertise with SOAR platforms (Splunk SOAR, Palo Alto XSOAR, Tines, Torq) Familiarity with key security events on common IT platforms Deep proficiency in client and server operating systems including Windows, Mac, and Linux 🎁 Benefits Remote workforce primarily (U.S. based only, some travel may be required) Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of premium for HSA contributions in 4 equal quarterly installments: ($850 per EE annually / $1750 per family Group Dental Insurance: GuidePoint pays 100% of premium for employees and 75% of family plans 12 corporate holidays and a Flexible Time Off (FTO) program Healthy mobile phone and home internet allowance