Assist with day-to-day security engineering and operations work.
Support threat monitoring, triage, and analysis activities.
Partner with application, infrastructure, and DevOps teams to help track and remediate vulnerabilities.
Create and maintain operational runbooks and assist with SOC documentation and process updates.
Configure and monitor alerts and dashboards in the SIEM platform.
Help automate recurring tasks using Python, PowerShell, or other scripting languages.
Participate in incident response activities alongside the production IR team during security events.
Contribute to knowledge sharing and cross-team learning through documentation, demos, or training sessions.

Bachelor's degree in Information Systems, Computer Science, or related discipline.
1–3 years of experience in security operations, IT operations, systems administration, or a related technical area.
Security+ or similar foundational security certification preferred; CEH, SANS, ISC2, or cloud certifications (AWS, Azure, GCP) are a plus.
Foundational knowledge of security concepts and tools (e.g., SOC operations, SIEM, EDR, email threat protection, vulnerability management, and cloud security).
Basic scripting familiarity (Python or PowerShell) and willingness to learn automation practices.
Awareness of MITRE ATT&CK, common attack techniques, and basic log analysis concepts.

Engineer I, SOC

Key skills