Senior SOC Engineer - Remote Work | REF#306586

BairesDev; Colombia; Remote; COP 284,765,000 - 411,327,000; Full time

Benefits offered by this job

100% remote

USD or local currency compensation

Hardware and setup for remote work

Flexible hours

Parental leave and holidays

Job summary

BairesDev, a global technology leader, seeks a Senior SOC Engineer to advise enterprise customers after purchase. You’ll apply security operations expertise, troubleshoot critical issues, write automation scripts, and help clients realize ROI from their security investments.

You’ll work with SIEM/SOAR/XDR platforms, build integrations, train customers, and communicate complex security concepts clearly in English.

Qualifications

• 5+ years in Security Operations (detection, triage, IR, automation).
• Experience with SIEM/SOAR/XDR (Splunk, Sentinel, QRadar, CrowdStrike).
• Strong XDR/EDR, Cortex XDR preferred; others acceptable.
• Scripting: Python and/or JavaScript.
• Linux administration in production environments.
• Cloud security knowledge (GCP/AWS/Azure).
• Excellent customer-facing communication in English.
• Spanish and/or Portuguese a plus.

Responsibilities

• Serve as trusted advisor and product SME for enterprise customers using a converged XDR/SIEM/SOAR platform.
• Troubleshoot critical customer issues, applying detection, triage, and incident response expertise.
• Write scripts and build custom integrations to support and automate customer workflows.
• Train customers and create knowledge base articles and guides that drive product adoption.
• Help customers realize ROI and ongoing value from their security platform investment.

Skills

Security Operations

Incident response

Scripting: Python/JavaScript

Linux administration

Cloud security

English proficiency

Tools

Splunk

Microsoft Sentinel

IBM QRadar

CrowdStrike Falcon

Cortex XDR

Job description

At BairesDev®, we've been leading the way in technology projects for over 15 years. We deliver cutting-edge solutions to giants like Google and the most innovative startups in Silicon Valley.

Our diverse 4,000+ team, composed of the world's Top 1% of tech talent, works remotely on roles that drive significant impact worldwide.

When you apply for this position, you're taking the first step in a process that goes beyond the ordinary. We aim to align your passions and skills with our vacancies, setting you on a path to exceptional career development and success.

Senior SOC Engineer at BairesDev

In this role, you'll act as a trusted advisor to enterprise customers post-purchase, not a SOC analyst watching dashboards. Your day-to-day includes product SME support, troubleshooting critical issues, writing scripts, training customers, and driving ROI and value realization on their security investment. This is your opportunity to combine deep security operations expertise with genuine customer-facing skills, explaining complex security concepts clearly while helping enterprise customers get real value from their security infrastructure.

What You'll Do

• Serve as a trusted advisor and product SME for enterprise customers using a converged XDR/SIEM/SOAR platform.
• Troubleshoot critical customer issues, applying detection, triage, and incident response expertise.
• Write scripts and build custom integrations to support and automate customer workflows.
• Train customers and create knowledge base articles and guides that drive product adoption.
• Help customers realize ROI and ongoing value from their security platform investment.

What We Are Looking For

• 5+ years of experience in Security Operations environments, including detection, triage, incident response, automation, and security tool administration.
• Background with SIEM/SOAR/XDR platforms such as Splunk, Sentinel, QRadar, CrowdStrike Falcon, or equivalent.
• Strong XDR/EDR experience, with Cortex XDR preferred; CrowdStrike, SentinelOne, Carbon Black, or Microsoft Defender XDR also acceptable, covering endpoint detection, investigation workflows, alert triage, and response automation.
• Practical, hands‑on scripting ability in Python and/or JavaScript for automating workflows and building custom integrations and tooling.
• Linux system administration and troubleshooting experience in production environments.
• Cloud security awareness across GCP, AWS, or Azure.
• Genuine customer‑facing experience, with strong communication skills and the ability to explain complex security concepts clearly to non‑technical stakeholders.
• Advanced proficiency in English.

Nice To Have

• Direct experience with Cortex XSIAM.
• Experience with SOAR/playbook development such as XSOAR or Phantom.
• Background in enterprise network security fundamentals, including NGFW, PAN-OS, Panorama, firewall policy, VPN, or IDS/IPS.
• Experience creating technical content such as knowledge base articles, customer guides, or troubleshooting documentation.
• PCNSA, PCNSE, or equivalent Palo Alto certification.
• Proficiency in Spanish and/or Portuguese.

How we do make your work (and your life) easier:

• 100% remote work (from anywhere).
• Excellent compensation in USD or your local currency if preferred
• Hardware and software setup for you to work from home.
• Flexible hours: create your own schedule.
• Paid parental leaves, vacations, and national holidays.
• Innovative and multicultural work environment: collaborate and learn from the global Top 1% of talent.
• Supportive environment with mentorship, promotions, skill development, and diverse growth opportunities.

Join a global team where your unique talents can truly thrive and make a significant impact!