Senior Security Engineer

Experteer Overview In this role you will own and evolve the SOC tooling stack to enable a detection-first security operation. You will work closely with SOC analysts and cross-functional teams to ensure tools are scalable, reliable, and tightly aligned with adversary behaviors. You will shape detection capabilities, automate workflows, and improve EDR health to accelerate investigations. This is a hands-on, technically deep position at the core of Sandisk’s security program, offering meaningful impact on enterprise defenses. Compensation / Benefits * Engineer, deploy, and maintain core SOC platforms (EDR/XDR, malware analysis, sandboxing, email security, vulnerability scanning) * Act as technical owner for SOC platforms with lifecycle management and decommissioning * Ensure scalability, reliability, performance, and forensic integrity of SOC tooling * Collaborate with IT and platform teams to resolve infrastructure and access issues * Own EDR engineering, hygiene standards, and health metrics across the enterprise * Develop testing frameworks to validate detections, policies, and response actions * Enable high-fidelity detections through detection engineering tooling and telemetry * Maintain malware detonation/analysis environments and support tooling for static/dynamic analysis * Assess emerging threats and evaluate tooling coverage and gaps * Automate routine SOC operations and build scripts to reduce analyst toil * Author engineering documentation and define standards/guardrails for tool usage * Support audits, tabletop exercises, and incident reviews from a tooling perspective Tasks * 5-10+ years in security engineering or advanced SOC roles * Hands-on experience with EDR/XDR platforms (CrowdStrike, Defender, SentinelOne) * Experience owning SOC platforms (beyond just consuming alerts) * Strong Windows internals, Linux, and server telemetry knowledge * Experience supporting malware analysis and sandboxing * Familiarity with SOC workflows, detection pipelines, and IR requirements * Scripting and automation skills (PowerShell, Python) * Knowledge of attacker TTPs mapped to MITRE ATT&CK * Preferred exposure to SIEM/SOAR integrations and vulnerability management * Relevant certifications (GIAC, GREM, GCED, GCIA, OSCP) preferred Key requirements * paid vacation * paid sick leave * medical/dental/vision insurance * 401(k) plan with employee stock purchase plan * tuition reimbursement * short-term incentive plan

_ metrics across the enterprise * Develop testing frameworks to validate detections, policies, and response actions * Enable high-fidelity detections through detection engineering tooling and telemetry * Maintain malware detonation/analysis environments and support tooling for static/dynamic analysis * Assess emerging threats and evaluate tooling coverage and gaps * Automate routine SOC operations and build scripts to reduce analyst toil * Author engineering documentation and define standards/guardrails for tool usage * Support audits, tabletop exercises, and incident reviews from a tooling perspective Tasks * 5-10+ years in security engineering or advanced SOC roles * Hands-on experience with EDR/XDR platforms (CrowdStrike, Defender, SentinelOne) * Experience owning SOC platforms (beyond just consuming alerts) * Strong Windows internals, Linux, and server telemetry knowledge * Experience supporting malware analysis and sandboxing * Familiarity with SOC workflows, detection pipelines, and IR requirements * Scripting and automation skills (PowerShell, Python) * Knowledge of attacker TTPs mapped to MITRE ATT&CK * Preferred exposure to SIEM/SOAR integrations and vulnerability management * Relevant certifications (GIAC, GREM, GCED, GCIA, OSCP) preferred Key requirements * paid vacation * paid sick leave * medical/dental/vision insurance * 401(k) plan with employee stock purchase plan * tuition reimbursement * short-term incentive plan