Information Security Engineer

Cybersecurity Jobs; Foster City (CA); On-site; USD 103,000 - 110,000; Full time

Benefits offered by this job

Medical and Prescription Drug Plans

Dental Plan

Vision Plan

Health Savings Account

Health Flexible Spending Account

Dependent Care Flexible Spending  

Supplemental Life Insurance

Weekly Pay

Job summary

Cybersecurity Jobs seeks an Information Security Engineer to support SOC operations in Foster City, CA. You will engineer SIEM and SOAR, automate tasks with Python, and hunt threats to strengthen detection and response capabilities.

The role focuses on developing detection rules, automation playbooks, and incident response procedures to improve security posture in a fast-paced environment.

Qualifications

• 6+ years in a Security Engineering role supporting a SOC environment or equivalent.
• Proven experience with SOAR platforms and playbook development (XSOAR, Splunk SOAR, or Tines).
• Strong Python skills for automation and scripting security tasks.

Responsibilities

• Maintain and optimize SIEM and SOAR platforms to support detection and security response.
• Develop and tune SIEM detection rules and correlation rules with dashboards and reports.
• Create and improve SOAR playbooks to automate incident response workflows.

Skills

Python scripting

Threat hunting

Incident response

SOC operations

MITRE ATT&CK

NIST

Tools

SIEM platforms

SOAR platforms

Palo Alto Cortex XSOAR

Splunk SOAR

Tines

Job description

Information Security Engineer role supporting SOC operations through SIEM/SOAR engineering, automation, and threat hunting in Foster City, CA.

• Location: Foster City, CA (onsite)
• Schedule: onsite
• Pay: USD $75–$80/hour + benefits
• Experience: 6+ years

Responsibilities

• Maintain and optimize SIEM and SOAR platforms to support dependable detection and efficient security response
• Develop and fine-tune SIEM detection and correlation rules, plus associated dashboards and reports to surface anomalous activity accurately
• Create, manage, and continuously improve SOAR playbooks to automate incident response workflows and streamline SOC operations
• Use Python scripting to create custom integrations and automate recurring SOC tasks, including alert triage and incident response support
• Perform proactive threat hunting by analyzing alerts and data from multiple sources to identify detection gaps and potential indicators of compromise

Requirements

• 6+ years of experience in a Security Engineering role supporting a SOC environment or comparable function
• Proven experience with SOAR platforms and playbook development, including one or more of:
  • Palo Alto Cortex XSOAR
  • Splunk SOAR
  • Tines
• Strong proficiency in Python for automation and scripting security tasks
• Solid understanding of incident response methodologies, threat intelligence, and cybersecurity frameworks, including:
  • MITRE ATT&CK
  • NIST
• Excellent analytical and problem-solving skills, with the ability to operate effectively in a fast-paced environment

Technologies

• SIEM
• SOAR
• Python
• Palo Alto Cortex XSOAR
• Splunk SOAR
• Tines
• MITRE ATT&CK
• NIST

Benefits

• Medical and Prescription Drug Plans
• Dental Plan
• Vision Plan
• Health Savings Account
• Health Flexible Spending Account
• Dependent Care Flexible Spending Account
• Supplemental Life Insurance
• Short Term and Long Term Disability Insurance
• Business Travel Insurance
• 401(k), Plus Match
• Weekly Pay

What’s in it for you

• Strengthen the security posture through automation, detection tuning, and threat hunting
• Improve and expand SIEM/SOAR workflows that influence how incidents are identified and handled
• Collaborate with Information Security and cross-functional teams to enhance overall organizational security
• Own clear documentation for detection rules, automation workflows, and incident response procedures
• Hands‑on engineering work that converts security insights into repeatable, automated actions