Lead SOC Engineer

OnTrac; United States; Remote; USD 156,000 - 195,000; Full time

Benefits offered by this job

Medical insurance

Life insurance

401(k) with company match

Flexible vacation

Job summary

OnTrac is seeking a Lead SOC Engineer to design, build, and maintain robust security architectures as a senior individual contributor. This hands-on role requires pivoting between deep technical engineering and strategy support, optimizing detection capabilities for SOC and translating regulatory requirements into automated evidence collection.

The position is remote within authorized states and offers a comprehensive benefits package, including medical, life, 401(k) with match, flexible

Qualifications

• The candidate has a Bachelor's degree or equivalent practical experience in a related field.
• 2?

Responsibilities

• Design and implement SOC tools orchestration and automated risk monitoring.
• Lead integration of security tools to unify posture.
• Assist in technical risk assessments and remediation.
• Develop security infrastructure in hybrid environments.
• Serve as Tier 3 escalation for complex incidents.
• Mentor junior engineers and analysts.

Skills

Network security

Endpoint protection

Cloud security AWS/GCP

Scripting & Automation

SIEM & EDR

GRC fluency

Explain vulnerabilities to non-tech

Education

Bachelor’s degree in Computer Science/Cybersecurity/IT or equivalent

Tools

EDR

SIEM

SOAR

Job description

OnTrac is hiring aLead SOC Engineer!

Founded in 1986, OnTrac has evolved into the leading provider of same-day and next-day delivery services in the U.S. for premier e-commerce and product-supply businesses, including five of the largest retailers in the U.S.

Location

Remote - This position may be performed remotely in states where the company is authorized to employ individuals.

Compensation

The expected starting base pay range for this position is $156,000 - $195,000, with full potential base salary range over a successful candidate’s tenure in the position of $156,000 - $234,000. Actual compensation will be determined based on experience, skills, internal equity, and other job-related factors.

Employment Logistics

We are seeking a Lead Cyber Security Engineer, a senior-level individual contributor responsible for designing, building, and maintaining robust security architectures. This is a "hands-on-keyboard" role that requires the ability to pivot between deep technical engineering and assisting in strategic support. You will act as a primary technical enabler for the Security Operations Center (SOC) by optimizing detection capabilities and for the Governance, Risk, and Compliance (GRC) team by translating complex regulatory requirements into technical controls and automated evidence collection.

Unpacking the Benefits

Employees are eligible for a comprehensive benefits package which may include:

• Medical, dental, and vision insurance
• Life and short- and long-term disability coverage
• 401(k) retirement savings plan with company match
• Flex vacation in states other than CA, CO, IL, MA, MT, and NE, with accruals up to 96 hours for first year of employment with tenure-based increases up to 160 hours
• Two (2) floating holidays per year
• Paid sick leave*
• Six (6) paid company holidays
• Two (2) weeks paid pregnancy disability leave, four (4) weeks paid parental bonding leave
• Additional wellness and employee assistance programs

Benefits eligibility and offerings are subject to the terms and conditions of the applicable plans and company policies.

The Must-Haves

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field (or equivalent practical experience).
• 10 years of progressive experience in IT and Security, at least 3 years in a senior or lead engineering capacity.
• CISSP, CISM, or hands-on technical certifications like GIAC (GCIA, GCDA) or Offensive Security (OSCP) are strongly preferred.
• Must demonstrate a "Generalist" Mindset, proficient across multiple domains, including network security (firewalls, Zero Trust), endpoint protection, and cloud security (AWS/GCP).
• Scripting & Automation experience with a strong ability to code/script in Python, PowerShell, or Bash to automate repetitive security tasks and integrations.
• OC/Threat Hunting Tech experience and a deep understanding of SIEM logic, YARA rules, and EDR configuration to improve detection efficacy.
• GRC Fluency and the ability to interpret frameworks such as NIST CSF, ISO 27001, or SOC2 and implement the technical controls required to meet them.
• The unique ability to explain deep technical vulnerabilities to non-technical risk stakeholders and vice-versa.

Your Mission in Motion

A summary of key responsibilities for the role is outlined below. Additional duties may be assigned as needed to support business objectives.

• Cross-Functional Enablement: Design and implement technical solutions that assist the SOC in alert orchestration (SOAR) and provide the GRC team with automated risk monitoring tools.
• Security Integration: Lead the integration of disparate security tools (EDR, SIEM, Cloud Security) to ensure a unified and visible security posture.
• Risk Management Support: Assist in technical risk assessments, identifying vulnerabilities within the infrastructure, and recommending/implementing remediation engineering.
• Architecture & Engineering: Develop and maintain security infrastructure in hybrid environments (on-prem/cloud), ensuring "security by design" is applied to all new deployments.
• Incident Response Escalation: Serve as a Tier 3 technical escalation point for complex security incidents requiring deep forensic or architectural expertise.
• Mentorship: Guide junior engineers and analysts, fostering a culture of technical excellence and proactive security.

Paving your way to your success

• You demonstrate extensive and diverse experience, applying deep professional knowledge, insight, and alignment with company objectives to develop and resolve complex models and procedures.
• You deliver innovative and effective solutions to challenging issues with a strong understanding of the interconnections among various disciplines.
• You build and nurture networks with key stakeholders beyond your own area of expertise.
• You adapt communication style and employ persuasive skills to convey messages aligned with broader business objectives.
• You frequently provide guidance on complex issues and may hold accountability for achieving tactical business targets.

Disclosures

• *Washington state employees are eligible for up to 56 hours of paid sick leave annually.
• The hourly rate range above represents the national range for this position. The hourly rate range may be inclusive of several career levels at OnTrac, and the actual base hourly rate offered may vary depending on several factors including, but not limited to: geographic location, candidate experience and qualifications, job-related skills and competencies, market alignment, and financial considerations.
• Compensation decisions are made based on the specific circumstances of each hire to ensure fair and competitive pay.
• This job posting is anticipated to remain open for at least 30 days from the date of posting.