> Markdown version of [/jobs/ext/3699596-engineer-security-operations](https://www.wearedevelopers.com/jobs/ext/3699596-engineer-security-operations). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Engineer - Security Operations

- **Company:** Irvine Technology Corporation
- **Location:** Garden Grove, CA, United States (Remote available)
- **Experience:** Expert
- **Salary:** $125,000.0 - $150,000.0
- **Contract:** Permanent contract
- **Skills:** Cloud Computing Security, Cyber Security, Information Systems, Identity and Access Management, Information Technology Operations, Performance Tuning, Security Information and Event Management, Software Vulnerability Management, Information Technology
- **Published:** October 12, 2026
- **Apply:** https://www.juju.com/job/16_1054ac98

## About the Role

* 4-6 years of experience in cybersecurity, security operations, incident response, IT operations, networking, or a related role.
 * Strong hands-on experience with EDR and SIEM tools, plus experience with email security, identity security, vulnerability management, or ITSM platforms.
 * Solid understanding of alert triage, endpoint security, identity risk, cloud security, and response workflows.
 * Strong communication skills, a practical and straightforward approach, and the ability to work well with both technical teams and business stakeholders.
 * Experience with Purview, EDI security, MSSP coordination, SIEM tuning, or automation is a plus. A bachelor's degree in Cybersecurity, Information Systems, Computer Science, or a related field is preferred.

## Description

Ready to be the person who turns security alerts into clear action? Our client is adding a Senior Security Operations Engineer to its security team. This is a newly created, hands-on role. You'll investigate alerts, lead incidents through to resolution, and make the tools and processes around you work better. You'll work closely with cybersecurity, IT, infrastructure, vendors, and business teams, so your communication skills and follow-through will matter as much as your technical depth., * Investigate and triage alerts from EDR, SIEM, email, identity, vulnerability, cloud, and endpoint tools, and escalate clearly when containment or a business decision is needed.

 * Support incident response from scoping and containment through remediation and recovery, coordinating with IT, infrastructure, support, and business owners.
 * Follow vulnerabilities, misconfigurations, and operational findings through to closure.
 * Improve tuning, automation, dashboards, and playbooks to raise alert quality and cut manual work, and help roll out new security tools and processes.
 * Document investigations, playbooks, runbooks, and escalation paths, and serve as a trusted hands-on resource for operations questions and escalations.