IT Security Engineer - SIEM, SOAR & Detection Engineering

Join a technology-driven security organization focused on strengthening enterprise defenses through practical security engineering, automation, detection, and infrastructure controls. This team supports a diverse security technology ecosystem and needs engineers who can move comfortably between established platforms, operational priorities, and emerging security initiatives.

The environment is well suited for an engineer who enjoys solving technical security problems, improving security tooling, and partnering with infrastructure, networking, security operations, and technology stakeholders.

What’s In Store For You

• Initial six-month consulting engagement supporting enterprise security engineering initiatives.
• Hybrid working model with three days onsite and two days remote.
• Some flexibility in onsite expectations may be available for exceptionally strong candidates.
• Opportunity to work across several security disciplines rather than being limited to one platform or product.
• Exposure to security automation, threat detection, network security, access controls, and operational engineering.

How You Will Make An Impact

• Engineer, maintain, and enhance security technologies supporting enterprise cyber defense.
• Support SIEM platforms through integrations, data onboarding, configuration, tuning, and operational improvements.
• Develop and maintain SOAR workflows and security automation capabilities.
• Create and refine detection logic that improves identification of suspicious or malicious activity.
• Support Secure Web Gateway and Network Access Control technologies and related integrations.
• Troubleshoot security technology issues and collaborate with infrastructure, networking, and security operations teams.
• Assist with additional security engineering initiatives as organizational priorities evolve.

• Hands-on experience supporting enterprise security engineering environments.
• Practical experience with one or more of the following areas: SIEM, SOAR, Secure Web Gateway, detection engineering, or Network Access Control.
• Ability to configure, troubleshoot, integrate, and improve security technologies rather than solely consume their outputs.
• Understanding of security monitoring, incident detection, network security, and security operations practices.
• Ability to work effectively across multiple security technologies and quickly learn unfamiliar environments.
• Strong troubleshooting and analytical skills.
• Effective communication and ability to collaborate with security, infrastructure, networking, and technology stakeholders.
• Comfortable working in a hybrid environment with approximately three days onsite each week.