Lead SOC Engineer — Hybrid/Remote (TX)

RBFCU Insurance Agency LLC; San Antonio (TX); Hybrid; USD 150,000 - 190,000; Full time

Benefits offered by this job

401(k) matching

Medical/Vision/Dental benefits

Paid time off

Tuition reimbursement

Job summary

Randolph-Brooks Federal Credit Union is seeking a Principal SOC Engineer to shape the security monitoring, analytics, and incident response strategy. The role supports a hybrid schedule (remote/onsite) after training at the RBFCU campus in Live Oak, Texas, and requires residency in Texas with home-based work capabilities.

You will guide telemetry, detection, automation, and threat intelligence across cloud, identity, endpoint, network, and data platforms, influencing senior leaders and building

Qualifications

• Bachelor’s degree in IT security or related fields or four years of job-related experience in lieu of a degree.
• Minimum 5 years of experience in cybersecurity, information security, cyber defense, security operations, incident response, threat intelligence, detection engineering, or related discipline.
• Proven mastery of incident investigation and command, detection engineering, threat hunting, telemetry architecture, security analytics, automation, adversary behavior, and enterprise risk communication.

Responsibilities

• Define multi-year technical strategy and target architecture for enterprise security operations, detection, and response.
• Lead or advise on high-impact security incidents, attack campaigns, forensic investigations, and enterprise response decisions.
• Architect scalable security data, SIEM, XDR, SOAR, case-management, threat intelligence, analytics, automation, and response-control capabilities.

Skills

Incident investigation

Threat hunting

Telemetry architecture

Security analytics

Automation

Cloud detection

Leadership

Executive communication

Education

Bachelor’s degree in IT security or related fields

Tools

SIEM

XDR

SOAR

Forensics tools

Cloud monitoring

Job description

Randolph-Brooks Federal Credit Union is seeking a Principal SOC Engineer to shape the security monitoring, analytics, and incident response strategy. The role supports a hybrid schedule (remote/onsite) after training at the RBFCU campus in Live Oak, Texas, and requires residency in Texas with home-based work capabilities.

You will guide telemetry, detection, automation, and threat intelligence across cloud, identity, endpoint, network, and data platforms, influencing senior leaders and building