Security Engineer

Socket.dev; Richmond Hill; On-site; CAD 100,000 - 130,000; Full time

Job summary

Socket.dev is seeking a SOC Engineer with Elastic SIEM expertise to lead log investigations, optimize the SIEM infrastructure, and build automated response capabilities using Python and PowerShell.

You will design scalable SIEM solutions, manage data ingestion from diverse sources, and collaborate with SOC analysts on new use cases. The role requires 5+ years in a SOC and strong scripting and cloud experience across AWS, GCP, or Azure.

Qualifications

• 5+ years of experience in a SOC environment focusing on Elastic SIEM.
• Strong log analysis, incident response, and threat detection methodologies.
• Experience with Elastic SIEM stack (Elasticsearch, Logstash, Kibana).
• Proficiency in PowerShell and Python scripting.

Responsibilities

• Investigate security incidents using log data to identify threats and vulnerabilities.
• Develop and maintain incident runbooks and response procedures.
• Create and refine SIEM rules, alerts, and dashboards to enhance threat detection.
• Automate repetitive tasks using PowerShell and Python to improve SOC efficiency.
• Implement SIEM security measures, including access controls.

Skills

Elastic SIEM

Log analysis

Incident response

Python scripting

PowerShell scripting

Linux

Cloud platforms (AWS/GCP/Azure)

Tools

Elastic Stack (Elasticsearch, Logstash, Kibana)

Job description

Summary/Objective

We're hiring a SOC Engineer! Are you an Elastic SIEM expert with a passion for threat detection and automation? We are looking for a seasoned engineer (5+ years experience) to lead our complex log investigations, optimize our SIEM infrastructure, and build out automated response capabilities using Python and PowerShell.

If you love turning data into defense, check out the details below.

Key Responsibilities:

Log Investigation & Incident Response:

• Investigate security incidents using log data to identify threats and vulnerabilities.
• Respond to incidents in a timely and efficient manner, ensuring thorough documentation and analysis.
• Develop and maintain incident runbooks and response procedures.

Rule & Dashboard Development:

• Create and refine SIEM rules, alerts, and dashboards to enhance threat detection capabilities.
• Continuously optimize detection logic to reduce false positives and improve accuracy.
• Collaborate with SOC analysts to identify and implement new use cases.

Elastic SIEM Management:

• Design and maintain a scalable Elastic SIEM infrastructure.
• Manage data ingestion, ensuring accurate and consistent logging from various sources.
• Monitor system health and performance, implementing optimizations as needed.

Scripting & Automation:

• Automate repetitive tasks using PowerShell and Python to improve SOC efficiency.
• Develop custom scripts to enhance log parsing and event enrichment processes.

Security & Best Practices:

• Implement SIEM security measures, including user roles and access controls.
• Stay updated with the latest security trends and ensure compliance with industry best practices.

Required Skills & Experience:

• 5+ years of experience in a SOC environment with a focus on ELASTIC SIEM
• Strong knowledge of log analysis, incident response, and threat detection methodologies.
• Experience with the Elastic SIEM stack (Elasticsearch, Logstash, Kibana).
• Proficiency in PowerShell and Python scripting.
• Familiarity with network protocols, cybersecurity frameworks, and attack vectors.
• Experience with Linux and cloud platforms (AWS, GCP, or Azure).
• Excellent problem-solving skills and attention to detail.

Salary Range: $100K-130k

WorkEnvironment

Thisjoboperatesinaprofessionalofficeenvironment.Thisroleroutinelyusesstandardofficeequipmentsuchaslaptopcomputers,photocopiersandsmartphones.

PhysicalDemands

Whileperformingthedutiesofthisjob,theemployeeisregularlyrequiredtotalkorhear.Specificvisionabilitiesrequiredbythisjobincludeclosevisionandabilitytoadjustfocus.Thiswouldrequiretheabilitytoliftfiles,openfilingcabinetsandbendorstandonastoolasnecessary.Theemployeeisoccasionallyrequiredtostand;walk;usehandstofinger,handle,orfeelobjects,tools,orcontrols;reachwithhandsandarms;andstoop,kneel,crouchorcrawl.Theemployeemayberequiredtolifeupto25lbs.

PositionType/ExpectedHoursofWork

Thisisafull-timeposition.DaysandhoursofworkareMondaythroughFridayduringnormalbusinesshours.Occasionaleveningandweekendworkmayberequiredasjobdutiesdemand.

Travel

Minimaltravel

OtherDuties

Pleasenotethisjobdescriptionisnotdesignedtocoverorcontainacomprehensivelistingofactivities,dutiesorresponsibilitiesthatarerequiredoftheemployeeforthisjob.Duties,responsibilitiesandactivitiesmaychangeatanytimewithorwithoutnotice.

EEOStatement

Paymentusisanequalopportunityemployer.Weenthusiasticallyacceptourresponsibilitytomakeemploymentdecisionswithoutregardtorace,religiouscreed,color,age,sex,sexualorientation,nationalorigin,ancestry,citizenshipstatus,religion,maritalstatus,disability,militaryserviceorveteranstatus,geneticinformation,medicalconditionincludingmedicalcharacteristics,oranyotherclassificationprotectedbyapplicablefederal,state,andlocallawsandordinances.Ourmanagementisdedicatedtoensuringthefulfillmentofthispolicywithrespecttohiring,placement,promotion,transfer,demotion,layoff,termination,recruitmentadvertising,pay,andotherformsofcompensation,training,andgeneraltreatmentduringemployment.

ReasonableAccommodation

Paymentusrecognizesandsupportsitsobligationtoendeavortoaccommodatejobapplicantsandemployeeswithknownphysicalormentaldisabilitieswhoareabletoperformtheessentialfunctionsoftheposition,withorwithoutreasonableaccommodation.Paymentuswillendeavortoprovidereasonableaccommodationstootherwisequalifiedjobapplicantsandemployeeswithknownphysicalormentaldisabilities,unlessdoingsowouldimposeanunduehardshipontheCompanyorposeadirectthreatofsubstantialharmtotheemployeeorothers.

AnapplicantoremployeewhobelievesheorsheneedsareasonableaccommodationofadisabilityshoulddiscusstheneedforpossibleaccommodationwiththeHumanResourcesDepartment,orhisorherdirectsupervisor.