SOC L2/L3 Engineer

📋 Description Build and deploy the SIEM from PoC to production with UEBA and case management. Design, write, and tune MITRE ATT&CK-aligned detection rules. Triage L2/L3 alerts; reduce false positives; define escalation paths. Lead incident response and forensics: containment, eradication, and lessons learned. Onboard log sources across AWS, JumpCloud, Google Workspace, SWIFT. 🎯 Requirements 3+ years in SOC / Detection & Response at L2/L3. Practical experience building/operating a SIEM and tuning rules. MITRE ATT&CK mapping; comfortable with KQL, SPL, or equivalents. Experience investigating cloud logs: AWS CloudTrail, GuardDuty, Google Workspace, EDR/XDR. Scripting and automation skills (Python or similar). Strong threat understanding; attacker techniques evidenced in logs. 🎁 Benefits 30+ days off and unlimited sick leave. Health coverage and Apple gear to keep you productive. Free office meals and wellness benefits. Courses, conferences, and sports programs. Referral bonus program for new hires.