Network Security Engineer

Partnerverse; Indiana (PA); On-site; USD 100,000 - 130,000; Full time

Job summary

Partnerverse is seeking a Network Security Engineer/Senior SOC Analyst to enhance our Security Operations Center. This role requires extensive experience in monitoring, detecting, and responding to security threats in a multi-cloud environment.

The ideal candidate will have 8+ years in security operations, strong skills in SIEM tools like Splunk and ELK, and proficiency with both Linux and Windows systems. Join us to protect our diverse technology landscape!

Qualifications

• 8+ years of experience in SOC, Security Operations, or Incident Response.
• Strong experience in SIEM tools like Splunk and ELK.
• Hands-on experience with EDR/XDR tools such as CrowdStrike.

Responsibilities

• Monitor and analyze security alerts from SIEM, EDR, IDS/IPS.
• Perform real-time threat detection and incident response.
• Investigate suspicious activities in cloud environments.

Skills

SIEM tools (Splunk, ELK, LogRhythm, QRadar)

Linux security

EDR/XDR tools (CrowdStrike, SentinelOne)

Threat detection and incident response

Networking concepts (TCP/IP, DNS)

Cloud environments (AWS, Azure, GCP)

Log analysis

Tools

Linux systems

Windows machines

macOS endpoints

Python scripting

Job description

About The Role

We are looking for a Network Security Engineer / Senior SOC Analyst to strengthen our Security Operations Center for a fast‑growing IT organization with 700+ employees and a diverse technology landscape.

Our Environment Includes

• 400+ Linux systems, 200+ Windows machines, and 200+ macOS endpoints
• Development stack: Node.js, Ruby on Rails (RoR), Rust, Blockchain platforms
• Domains: Mobile applications, gaming platforms, FinTech systems
• Infrastructure: Multi‑cloud (AWS, Azure, GCP)

This role is ideal for professionals who thrive in complex, high‑scale environments and can actively monitor, detect, investigate, and respond to security threats across infrastructure, endpoints, and applications.

Key Responsibilities

• Monitor and analyze security alerts from SIEM, EDR, IDS/IPS, and cloud security tools
• Perform real‑time threat detection, triage, and incident response across Linux, Windows, and macOS systems
• Investigate suspicious activities in multi‑cloud environments (AWS, Azure, GCP)
• Conduct log analysis and correlation across infrastructure, applications, and network layers
• Manage and tune SIEM platforms (e.g., Splunk, LogRhythm, ELK)
• Handle incident lifecycle: detection → analysis → containment → remediation → reporting
• Perform endpoint and server‑level investigations, especially on Linux‑heavy environments
• Support threat hunting activities and identify advanced persistent threats (APTs)
• Perform vulnerability analysis and coordinate with engineering teams for remediation
• Assist in cloud security monitoring including IAM anomalies, misconfigurations, and suspicious activity
• Maintain incident response playbooks, SOPs, and documentation
• Generate security reports, dashboards, and metrics for leadership
• Support compliance requirements (ISO 27001, internal audits, security controls)

Must‑Have Qualifications

• 8+ years of experience in SOC, Security Operations, or Incident Response
• Strong experience in SIEM tools (Splunk, ELK, LogRhythm, QRadar)
• Hands‑on experience with EDR/XDR tools (CrowdStrike, SentinelOne, Defender, etc.)
• Strong understanding of Linux security (critical), plus Windows and macOS environments
• Knowledge of networking concepts (TCP/IP, DNS, firewalls, VPNs)
• Experience in log analysis, threat detection, and incident triage
• Exposure to multi‑cloud environments (AWS, Azure, or GCP)
• Familiarity with web/app security basics (Node.js, APIs, backend services)
• Understanding of common attack vectors (MITRE ATT&CK, OWASP Top 10)
• Experience with vulnerability management tools
• Basic scripting/automation using Python, Bash, or PowerShell
• Strong analytical and troubleshooting skills

Preferred / Nice‑to‑Have

• Experience in FinTech, blockchain, or gaming environments
• Exposure to Rust‑based systems and blockchain node security
• Familiarity with DevSecOps and CI/CD security monitoring
• Experience with threat intelligence platforms
• Knowledge of container security / Kubernetes
• Certifications such as Security+, CEH, CySA+, CISSP (or pursuing)