Senior SOC Engineer - Remote Work | REF#305233

BairesDev; Rio de Janeiro; Remote; BRL 602,000 - 903,000; Full time

Benefits offered by this job

Remote work anywhere

USD salary option

Home hardware setup

Flexible hours

Parental leave & holidays

Global, multicultural team

Job summary

BairesDev is seeking a Senior SOC Engineer to act as a trusted advisor for enterprise customers, delivering product SME support and hands-on security operations expertise. You will troubleshoot critical issues, write automation scripts, train customers, and help realize ongoing value from security investments.

The role emphasizes deep security operations, clear communication with non-technical stakeholders, and a fully remote, globally distributed team. Advanced English required.

Qualifications

• 5+ years in Security Operations with detection, triage, incident response, automation, and tool administration.
• Experience with SIEM/SOAR/XDR platforms (Splunk, Sentinel, QRadar, CrowdStrike Falcon, or equivalent).
• Hands-on scripting in Python or JavaScript for automation and integrations.
• Linux system administration and production troubleshooting.
• Cloud security awareness across GCP, AWS, or Azure.
• Strong customer-facing communication and English proficiency.

Responsibilities

• Serve as product SME for enterprise customers on an XDR/SIEM/SOAR platform.
• Troubleshoot critical issues with detection, triage, and incident response.
• Write scripts and build integrations to automate workflows.
• Train customers and create knowledge base articles to drive adoption.
• Help customers realize ROI and ongoing value from their security investment.

Skills

Security operations

SIEM/SOAR/XDR

Python/JavaScript

Linux

Cloud security (GCP/AWS/Azure)

English (advanced)

Tools

Splunk

Sentinel

QRadar

CrowdStrike Falcon

Cortex XDR

XSOAR / Phantom

Job description

At BairesDev®, we've been leading the way in technology projects for over 15 years. We deliver cutting-edge solutions to giants like Google and the most innovative startups in Silicon Valley.

Our diverse 4,000+ team, composed of the world's Top 1% of tech talent, works remotely on roles that drive significant impact worldwide.

When you apply for this position, you're taking the first step in a process that goes beyond the ordinary. We aim to align your passions and skills with our vacancies, setting you on a path to exceptional career development and success.

Senior SOC Engineer at BairesDev

In this role, you'll act as a trusted advisor to enterprise customers post-purchase, not a SOC analyst watching dashboards. Your day-to-day includes product SME support, troubleshooting critical issues, writing scripts, training customers, and driving ROI and value realization on their security investment. This is your opportunity to combine deep security operations expertise with genuine customer-facing skills, explaining complex security concepts clearly while helping enterprise customers get real value from their security infrastructure.

What you'll do

• Serve as a trusted advisor and product SME for enterprise customers using a converged XDR/SIEM/SOAR platform.
• Troubleshoot critical customer issues, applying detection, triage, and incident response expertise.
• Write scripts and build custom integrations to support and automate customer workflows.
• Train customers and create knowledge base articles and guides that drive product adoption.
• Help customers realize ROI and ongoing value from their security platform investment.

What we are looking for

• 5+ years of experience in Security Operations environments, including detection, triage, incident response, automation, and security tool administration.
• Background with SIEM/SOAR/XDR platforms such as Splunk, Sentinel, QRadar, CrowdStrike Falcon, or equivalent.
• Strong XDR/EDR experience, with Cortex XDR preferred; CrowdStrike, SentinelOne, Carbon Black, or Microsoft Defender XDR also acceptable, covering endpoint detection, investigation workflows, alert triage, and response automation.
• Practical, hands-on scripting ability in Python and/or JavaScript for automating workflows and building custom integrations and tooling.
• Linux system administration and troubleshooting experience in production environments.
• Cloud security awareness across GCP, AWS, or Azure.
• Genuine customer-facing experience, with strong communication skills and the ability to explain complex security concepts clearly to non-technical stakeholders.
• Advanced proficiency in English.

Nice to have

• Direct experience with Cortex XSIAM.
• Experience with SOAR/playbook development such as XSOAR or Phantom.
• Background in enterprise network security fundamentals, including NGFW, PAN-OS, Panorama, firewall policy, VPN, or IDS/IPS.
• Experience creating technical content such as knowledge base articles, customer guides, or troubleshooting documentation.
• PCNSA, PCNSE, or equivalent Palo Alto certification.
• Proficiency in Spanish and/or Portuguese.

How we do make your work (and your life) easier:

• 100% remote work (from anywhere).
• Excellent compensation in USD or your local currency if preferred
• Hardware and software setup for you to work from home.
• Flexible hours: create your own schedule.
• Paid parental leaves, vacations, and national holidays.
• Innovative and multicultural work environment: collaborate and learn from the global Top 1% of talent.
• Supportive environment with mentorship, promotions, skill development, and diverse growth opportunities.

Join a global team where your unique talents can truly thrive and make a significant impact!