SOC Engineer

Job description

Hire Art is seeking an SOC Engineer to join its team. In this role, you’ll enhance the company’s security posture by driving automation and conducting proactive threat hunting.

The ideal candidate has a strong Info Sec background with deep experience in SIEM and SOAR platforms, including rule and playbook development, along with proficiency in Python scripting for automation.

As an SOC Engineer, you'll:

Develop and fine-tune detection and correlation rules, dashboards, and reports within the SIEM to accurately detect anomalous activities.

Create, manage, and optimize SOAR playbooks to automate incident response processes and streamline security operations.

Utilize Python scripting to develop custom integrations and automate repetitive tasks within the SOC.

Build and maintain automation workflows to enhance the efficiency of threat detection, alert triage, and incident response.

Integrate various security tools and threat intelligence feeds with our SIEM and SOAR platforms using APIs and custom scripts.

Conduct proactive threat hunting to identify potential security gaps and indicators of compromise.

Analyze security alerts and data from various sources to identify and respond to potential security incidents.

Collaborate with Information Security team members and other teams to enhance the overall security of the organization.

Create and maintain clear and comprehensive documentation for detection rules, automation workflows, and incident response procedures.

Requirements

6+ years of experience in a Security Operations Center (SOC) environment or a similar cybersecurity role

Strong Info Sec background with hands-on incident response and proactive threat hunting experience

Hands-on experience with managing and configuring SIEM platforms (e.g., Elastic SIEM, Splunk, QRadar, Microsoft Sentinel), including detection rule creation and tuning using SIEM query languages

Demonstrable experience with SOAR platforms (e.g., Palo Alto Cortex XSOAR, Splunk SOAR), including developing, maintaining, and troubleshooting playbooks (logic updates, bug fixes, and workflow enhancements)

Proficiency in Python for automation, data manipulation, and systems-level integrations (e.g., big data workflows, API-based automation)

Strong understanding of incident response methodologies, threat intelligence, and cybersecurity frameworks (e.g., MITRE ATT&CK, NIST)

Excellent analytical and problem-solving skills with the ability to work effectively in a fast-paced environment

Preferred Qualifications:

Relevant industry certifications such as CISSP, GCIH, or similar

Experience with cloud security and environmental constructs (AWS, Azure, GCP)

Familiarity with other scripting languages (e.g., Power Shell, Bash)

Knowledge of network and endpoint security solutions

Benefits:

Pre-tax commuter benefits

Employer (Hire Art) subsidized healthcare benefits (Eligibility begins on the first of the month following 60 days of service)

Flexible Spending Account for healthcare-related costs

Hire Art covers all costs for short- and long-term disability and life insurance

401k package

Commitment: This is a full-time, ongoing contract position staffed via Hire Art. This role is hybrid, requiring 3 days per week onsite, and is available to candidates local to the Foster City, CA area.

Hire Art values diversity and is an Equal Opportunity Employer. We are interested in every qualified candidate who is eligible to work in the United States. Unfortunately, we are not able to sponsor visas or employ corp-to-corp.