Security Operations Platform Engineer

First Quality Enterprises, Inc.
United States
about 1 month ago
Apply on firstquality.wd5.myworkdayjobs.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Experienced
Experience required
3 years minimum
Working hours
Regular working hours

Tech stack

Application Programming Interfaces (APIs) Amazon Web Services Microsoft Azure Software as a Service Cloud Computing Security Cyber Security Data Normalization Data Reduction Data Retention Data Retrieval Query Languages Intrusion Detection Systems
+15 more
JSON Python (Programming Language) Log Analysis Network Protocols Parsing Windows PowerShell Security Information and Event Management Scripting In-Plane Switching (IPS) Data Ingestion Mitre Att&ck Cyber Threat Analysis Firewalls (Computer Science) Information Technology Data Pipelines

Job description

  • Platform Management
  • Configure and maintain SIEM/SOAR platform
  • Monitor platform performance, availability, and data health
  • Review and maintain upgrades, integrations, and ongoing optimization
  • Manage role/scope-based access controls and data retention policies

  • Data Ingestion & Integration
  • Onboard and normalize log sources (firewalls, endpoints, servers, cloud, SaaS, identity providers, etc.)
  • Build integrations via scripting for custom data onboarding utilizing APIs
  • Troubleshoot ingestion issues and ensure log integrity and completeness
  • Review and maintain parsing rules and data mappings
  • Optimize data pipelines for performance and cost efficiency

  • SOC Operations Support
  • Develop, tune, and maintain detection rules logic, and alerting thresholds to improve fidelity and reduce false positives
  • Collaborate with SOC analysts during active investigations to provide platform support, log extraction, and forensic data retrieval
  • Vendor management and escalation support

  • Reporting & Dashboards
  • Build and maintain dashboards for SOC operations, compliance, and executive reporting
  • Develop and maintain scheduled and ad-hoc reports for stakeholders
  • Develop KPIs and metrics for security posture and incident trends

  • Continuous Improvement
  • Evaluate new log sources and security integrations
  • Recommend enhancements to improve visibility and coverage
  • Stay current on platform updates and best practices
  • Evaluate existing integrations and data to improve parsing, data normalization, and data reduction

Requirements

  • Bachelor’s degree in Cybersecurity, Information Technology, or related field (or equivalent experience)
  • 3+ years of experience managing a SIEM platform
  • Knowledge of network protocols, firewalls, IDS/IPS, EDR, cloud security logs
  • Understanding of data normalization standards (CEF, LEEF, JSON, etc.)
  • Experience with SIEM query languages
  • Experience with scripting (Python, PowerShell, or similar) for automation
  • Working knowledge of MITRE ATT&CK, threat intelligence, and incident response processes
  • Preferred: 3+ years managing SOAR platform
  • Preferred: Experience developing automation, and response playbooks
  • Preferred: Familiarity with Azure, AWS, or GCP log configurations
  • Preferred: Experience supporting compliance frameworks (NIST, ISO 27001, SOX, HIPAA, etc.)
  • Preferred: Security+, CySA+, CASP+, GCIA, GCIH, CISSP or equivalent
  • Analytical and problem-solving skills
  • Strong troubleshooting and log analysis capabilities
  • Ability to translate security requirements into technical solutions
  • Strong communication skills for technical and executive audiences
  • Ability to work both independently and collaboratively in a fast-paced SOC environment

Benefits & conditions

  • Competitive base salary and bonus opportunities
  • Paid time off (three-week minimum)
  • Medical, dental and vision starting day one
  • 401(k) with employer match
  • Paid parental leave
  • Child and family care assistance (dependent care FSA with employer match up to $2500)
  • Bundle of joy benefit (years’ worth of free diapers to all team members with a new baby)
  • Tuition assistance
  • Wellness program with savings of up to $4,000 per year on insurance premiums
  • …and more!

First Quality is committed to protecting information under the care of First Quality Enterprises commensurate with leading industry standards and applicable regulations. As such, First Quality provides at least annual training regarding data privacy and security to employees who, as a result of their role specifications, may come in to contact with sensitive data.

About the company

Founded over 35 years ago, First Quality is a family-owned company that has grown from a small business in McElhattan, Pennsylvania into a group of companies, employing over 5,000 team members, while maintaining our family values and entrepreneurial spirit. With corporate offices in New York and Pennsylvania and 8 manufacturing campuses across the U.S. and Canada, the companies within the First Quality group produce high-quality personal care and household products for large retailers and healthcare organizations. Our personal care and household product portfolio includes baby diapers, wipes, feminine pads, paper towels, bath tissue, adult incontinence products, laundry detergents, fabric finishers, and dishwash solutions. In addition, we manufacture certain raw materials and components used in the manufacturing of these products, including flexible print and packaging solutions.

Guided by our values of humility, unity, and integrity, we leverage advanced technology and innovation to drive growth and create new opportunities. At First Quality, you’ll find a collaborative environment focused on continuous learning, professional development, and our mission to Make Things Better®.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on firstquality.wd5.myworkdayjobs.com
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

1:04 min

Introduction to Bitcoin script parsing tools

Steve Shadders · LIVE

3:47 min

Exploring JSON, CBOR, and JOSE for data serialization

Aaron Russell · LIVE

2:56 min

Open-sourcing a complex parsing library for game data

Johan Hutting Johan Hutting · World Congress 2024

52 sec

Defining application, pipeline, and security operations roles

Aarno Aukia · LIVE

2:03 min

Distinguishing type definition constructs from data validation routines

Clemens Vasters Clemens Vasters · World Congress 2025

1:34 min

Pivoting careers into specialized platform engineering roles

Xavier Portilla Edo · LIVE

Videos

See all

Related articles

See all