Senior SOC Engineer - Remote Work | REF#304113

BairesDev; Antioquia; Remote; COP 277,675,000 - 401,086,000; Full time

Benefits offered by this job

Remote work

Competitive pay in USD or local

Hardware and software setup

Flexible hours

Parental leave

Job summary

BairesDev is seeking a Senior SOC Engineer to serve as trusted advisor to enterprise customers, blending security operations expertise with customer-facing skills. You will troubleshoot incidents, write scripts to automate workflows, and develop knowledge base content while helping clients realize ROI from their security investments.

This 100% remote role offers competitive compensation and opportunities to collaborate with the global Top 1% of talent.

Qualifications

• 5+ years in Security Operations with incident response and automation.
• Experience with SIEM/SOAR/XDR platforms (Splunk, Sentinel, QRadar, CrowdStrike Falcon).
• Strong XDR/EDR experience; Cortex XDR preferred.
• Scripting ability in Python and/or JavaScript for automation.
• Linux admin experience in production environments.
• Cloud security awareness across GCP, AWS, or Azure.
• Strong customer-facing skills and clear communication.
• Advanced English proficiency.

Responsibilities

• Serve as trusted advisor and product SME for enterprise customers.
• Troubleshoot critical issues, applying detection, triage, and incident response.
• Write scripts and build custom integrations to automate workflows.
• Train customers and create knowledge base articles and guides.
• Help customers realize ROI and ongoing value from their security platform.

Skills

Security Operations

SIEM/SOAR/XDR

Python/JavaScript scripting

Linux administration

Cloud security (GCP/AWS/Azure)

English proficiency

Customer-facing

Tools

Splunk

Sentinel

QRadar

CrowdStrike Falcon

Cortex XDR

Job description

At BairesDev® we've been leading the way in technology projects for over 15 years. We deliver cutting-edge solutions to giants like Google and the most innovative startups in Silicon Valley.

Our diverse 4,000+ team, composed of the world's Top 1% of tech talent, works remotely on roles that drive significant impact worldwide.

When you apply for this position, you're taking the first step in a process that goes beyond the ordinary. We aim to align your passions and skills with our vacancies, setting you on a path to exceptional career development and success.

Senior SOC Engineer at BairesDev

In this role, you'll act as a trusted advisor to enterprise customers post-purchase, not a SOC analyst watching dashboards. Your day-to-day includes product SME support, troubleshooting critical issues, writing scripts, training customers, and driving ROI and value realization on their security investment. This is your opportunity to combine deep security operations expertise with genuine customer‑facing skills, explaining complex security concepts clearly while helping enterprise customers get real value from their security infrastructure.

What You'll Do

• Serve as a trusted advisor and product SME for enterprise customers using a converged XDR/SIEM/SOAR platform.
• Troubleshoot critical customer issues, applying detection, triage, incident response expertise.
• Write scripts and build custom integrations to support and automate customer workflows.
• Train customers and create knowledge base articles and guides that drive product adoption.
• Help customers realize ROI and ongoing value from their security platform investment.

What We Are Looking For

• 5+ years of experience in Security Operations environments, including detection, triage, incident response, automation, and security tool administration.
• Background with SIEM/SOAR/XDR platforms such as Splunk, Sentinel, QRadar, CrowdStrike Falcon, or equivalent.
• Strong XDR/EDR experience, with Cortex XDR preferred; CrowdStrike, SentinelOne, Carbon Black, or Microsoft Defender XDR also acceptable, covering endpoint detection, investigation workflows, alert triage, and response automation.
• Practical, hands‑on scripting ability in Python and/or JavaScript for automating workflows and building custom integrations and tooling.
• Linux system administration and troubleshooting experience in production environments.
• Cloud security awareness across GCP, AWS, or Azure.
• Genuine customer‑facing experience, with strong communication skills and the ability to explain complex security concepts clearly to non‑technical stakeholders.
• Advanced proficiency in English.

Nice To Have

• Direct experience with Cortex XSIAM.
• Experience with SOAR/playbook development such as XSOAR or Phantom.
• Background in enterprise network security fundamentals, including NGFW, PAN-OS, Panorama, firewall policy, VPN, or IDS/IPS.
• Experience creating technical content such as knowledge base articles, customer guides, or troubleshooting documentation.
• PCNSA, PCNSE, or equivalent Palo Alto certification.
• Proficiency in Spanish and/or Portuguese.

How we do make your work (and your life) easier:

• 100% remote work (from anywhere).
• Excellent compensation in USD or your local currency if preferred
• Hardware and software setup for you to work from home.
• Flexible hours: create your own schedule.
• Paid parental leaves, vacations, and national holidays.
• Innovative and multicultural work environment: collaborate and learn from the global Top 1% of talent.
• Supportive environment with mentorship, promotions, skill development, and diverse growth opportunities.

Join a global team where your unique talents can truly thrive and make a significant impact!

#BD-PRIO-2026