Security Operations Engineer

Security Operations Engineer to provide dedicated engineering support within the Global Cyber Security Operations (GCSO) organization. This individual will be responsible for improving security telemetry onboarding, enhancing data quality across security platforms, strengthening detection content, and driving automation initiatives that improve operational efficiency and reduce manual analyst workload. The engineer will also support various platform enhancement initiatives across the cybersecurity technology stack while helping mature a growing Security Operations Engineering function., + Improve security telemetry onboarding and data quality within Cribl environments.

• Develop, tune, and optimize security detections within the SIEM and ReliaQuest platforms.
• Design and implement automation workflows that reduce manual analyst effort and improve security operations performance metrics.
• Enhance incident detection and response capabilities through advanced detection engineering practices.
• Support ongoing platform enhancement initiatives across the GCSO security technology stack.
• Build and maintain integrations between security tools and data sources.
• Improve operational visibility and monitoring across cloud and enterprise environments.
• Partner closely with Security Operations, Incident Response, and Security Engineering teams.
• Develop documentation and provide knowledge transfer to internal security teams.
• Deliver production-ready security enhancements including integrations, detections, workflow automation, and platform tuning improvements., The consultant will be expected to deliver a defined backlog of:
• Security telemetry integrations
• Detection use cases and enhanced detection content
• SIEM tuning and optimization improvements
• Cribl onboarding and data quality improvements
• Automated security workflows and response automations
• Platform enhancement initiatives across the security stack
• Documentation, runbooks, and knowledge transfer materials

Ideal Candidate The ideal candidate has progressed from a hands-on SOC Analyst or Incident Response background into Security Engineering. They possess strong technical expertise across enterprise security platforms, cloud security, detection engineering, and automation. This individual should be capable of quickly contributing to ongoing initiatives while helping enhance visibility, automation, detection quality, and overall cyber operations maturity. If this is a role that interests you and you’d like to learn more, click apply now and a recruiter will be in touch with you to discuss this great opportunity. We look forward to speaking with you! About ManpowerGroup, Parent Company of: Manpower, Experis and Talent Solutions Experis® is a global leader in technology services and part of the ManpowerGroup® (NYSE: MAN) family of brands. We connect skilled technology professionals with meaningful opportunities where they can grow their careers, expand their expertise and make a real impact. Guided by the belief that it takes Human Ingenuity to unlock the true potential of technology, Experis helps people gain experience with leading organizations, build sought-after skills and take the next step toward a brighter future. Backed by ManpowerGroup’s 75+ years of workforce expertise and global reach across more than 70 countries and territories, Experis brings the scale, insight and opportunity to help people and businesses thrive. ManpowerGroup is consistently recognized for its commitment to inclusion, ethics and responsible business, including being named one of the World’s Most Ethical Companies. Learn more at Experis.com.

• 5+ years of cybersecurity experience with a combination of Security Operations, Incident Response, and Security Engineering.
• Experience working within a SOC or Incident Response environment.
• Strong Security Engineering background.
• Microsoft Defender suite experience.
• Azure security and cloud security engineering experience.
• Detection engineering experience.
• Security automation and orchestration experience.
• Experience improving incident detection and response processes.
• Strong understanding of security telemetry, log pipelines, and event data management., + Cribl administration, integration, or engineering experience.
• SIEM engineering and content development experience.
• ReliaQuest experience.
• Defender for Cloud.
• Azure DevOps security experience.
• AWS security engineering and cloud security best practices.
• Experience building automated security workflows and reducing manual analyst tasks.
• Experience supporting large enterprise cybersecurity environments.