The ad says“AWS Certification: AWS entry-level certification required at minimum, such as AWS Certified Cloud Practitioner. AWS Solutions Architect – Associate or AWS Security Specialty is a plus”
The ad says“AWS Knowledge: Working knowledge of AWS services, cloud security fundamentals, logging, monitoring, IAM, and basic cloud architecture”
The ad says“AWS Knowledge: Working knowledge of AWS services, cloud security fundamentals, logging, monitoring, IAM, and basic cloud architecture”
The ad says“AWS Knowledge: Working knowledge of AWS services, cloud security fundamentals, logging, monitoring, IAM, and basic cloud architecture”
The ad says“Detection Languages: Experience with Sigma, SPL, KQL, SQL, YARA, or similar detection/query languages”
The ad says“AWS Knowledge: Working knowledge of AWS services, cloud security fundamentals, logging, monitoring, IAM, and basic cloud architecture”
The ad says“Detection Languages: Experience with Sigma, SPL, KQL, SQL, YARA, or similar detection/query languages”
The ad says“Python Proficiency: Hands-on proficiency with Python for scripting, automation, data processing, security tooling, or workflow development”
The ad says“Detection Languages: Experience with Sigma, SPL, KQL, SQL, YARA, or similar detection/query languages”
The ad says“Detection Languages: Experience with Sigma, SPL, KQL, SQL, YARA, or similar detection/query languages”
The ad says“Detection Languages: Experience with Sigma, SPL, KQL, SQL, YARA, or similar detection/query languages”
The ad says“Detection Languages: Experience with Sigma, SPL, KQL, SQL, YARA, or similar detection/query languages”
Values
The ad says“Agentic/AI Security Use Cases: Hands-on exposure to LLMs, AI agents, agentic workflows, or AI-assisted security operations”
The ad says“Infrastructure as Code: Familiarity with Terraform, CloudFormation, CDK, or similar tools”
The ad says“Infrastructure as Code: Familiarity with Terraform, CloudFormation, CDK, or similar tools”
The ad says“Agentic/AI Security Use Cases: Hands-on exposure to LLMs, AI agents, agentic workflows, or AI-assisted security operations”
The ad says“Infrastructure as Code: Familiarity with Terraform, CloudFormation, CDK, or similar tools”
Join our team as a Security Engineer working within an agentic SOC environment. This role is designed for someone who is ready to grow beyond traditional analyst responsibilities and move deeper into security engineering, automation, cloud security, detection engineering, and AI-assisted security operations
You will help build, operate, and improve a modern SOC that uses automation, agentic workflows, AI-assisted investigation, and security engineering practices to improve detection, triage, response, and overall security visibility. This is a hands-on role for someone who enjoys solving technical problems, improving systems, and building security capabilities rather than only monitoring alerts
Security Engineering: Build, maintain, and improve security workflows, integrations, detection processes, and operational tooling within an agentic SOC
Agentic SOC Operations: Work with automation, AI-assisted workflows, and agent-based capabilities that support alert triage, investigation, enrichment, and response
SIEM Log Flow Development: Help design, configure, maintain, and troubleshoot log ingestion flows into the SIEM from AWS, applications, infrastructure, endpoint tools, and security platforms
Detection Engineering: Create, tune, and maintain detection rules, alert logic, dashboards, playbooks, and investigation workflows
Python Automation: Develop Python scripts and automations for alert enrichment, data processing, reporting, workflow improvement, and security operations support
Cloud Security Monitoring: Support cloud security logging, monitoring, IAM reviews, and cloud detection use cases
SOC Operations: Review, analyze, and correlate security alerts and logs to identify suspicious activity and support investigations
Incident Response Support: Assist with security event investigations, escalation, containment, remediation, and post-incident improvements
Process Improvement: Help improve SOC processes, playbooks, detection coverage, documentation, and response workflows
Cross-Functional Collaboration: Partner with security, cloud, IT, and engineering teams to improve visibility, reduce risk, and strengthen security operations
Preferred experience
The ideal candidate has 2–3 years of cybersecurity experience, a strong SOC foundation, hands-on AWS knowledge, Python proficiency, and experience working with SIEM data and log pipelines. We are looking for someone motivated, curious, and eager to grow into a stronger security engineer within a modern, engineering-driven SOC model
AWS Certification: AWS entry-level certification required at minimum, such as AWS Certified Cloud Practitioner. AWS Solutions Architect – Associate or AWS Security Specialty is a plus
AWS Knowledge: Working knowledge of AWS services, cloud security fundamentals, logging, monitoring, IAM, and basic cloud architecture
Python Proficiency: Hands-on proficiency with Python for scripting, automation, data processing, security tooling, or workflow development
Detection Knowledge: Ability to help develop, tune, and improve detections based on logs, threat behavior, and operational needs
Log Pipeline Experience: Experience building, maintaining, or troubleshooting log flows from applications, infrastructure, AWS services, endpoint tools, or security platforms into a SIEM
Agentic SOC Familiarity: Familiarity with agentic concepts, agentic frameworks, AI-assisted workflows, autonomous or semi-autonomous agents, and practical security operations use cases
SIEM Experience: Experience working with SIEM platforms, including log ingestion, parsing, alerting, dashboards, and detection logic
SOC Foundation: Strong understanding of SOC workflows, alert triage, investigation, escalation, and incident response processes
Experience: 2–3 years of experience in cybersecurity, SOC operations, security engineering, cloud security, detection engineering, or incident response
Infrastructure as Code: Familiarity with Terraform, CloudFormation, CDK, or similar tools
Detection Languages: Experience with Sigma, SPL, KQL, SQL, YARA, or similar detection/query languages
Agentic/AI Security Use Cases: Hands-on exposure to LLMs, AI agents, agentic workflows, or AI-assisted security operations
