Onsite Senior Security Engineer — SIEM & SOAR Automation

AccruePartners; Charlotte (NC); Presencial; USD 90.000 - 130.000; Jornada completa

Descripción de la vacante

AccruePartners is seeking a senior cybersecurity professional to join our established security operations team. You will own the day-to-day management, health, tuning, and advancement of the organization's SIEM platform and contribute to the ongoing modernization of detection capabilities.

In this role you will develop and tune analytics, respond to incidents, build SOAR playbooks, and mentor junior analysts while coordinating with identity, endpoint, and network teams.

Formación

• 4+ years of cybersecurity experience with meaningful Security Operations or Incident Response exposure.
• 2+ years of hands-on experience working with an enterprise SIEM platform.
• Strong experience developing and tuning SIEM analytics rules, alerts, and detection content.
• Experience operating as a senior engineer, Tier 3 escalation resource, or advanced SOC analyst.
• Practical experience designing or maintaining SOAR playbooks.
• Strong understanding of incident response, investigations, evidence collection, and documentation.
• Scripting and automation experience using PowerShell, Python, or similar technologies.

Responsabilidades

• Own the day-to-day management, health, tuning, and advancement of the organization's SIEM platform.
• Develop, tune, and maintain detection rules across identity, endpoint, cloud, network, and other security telemetry.
• Serve as a senior escalation resource for complex or high-severity cybersecurity incidents.
• Conduct technical investigations, root-cause analysis, and forensic review as needed.
• Design and build SOAR playbooks that automate repetitive response activities and improve detection and response times.
• Develop automation and enrichment workflows using tools such as PowerShell, Python, or similar scripting languages.
• Evaluate and onboard new log sources, integrations, data connectors, and threat intelligence feeds.
• Partner with identity, endpoint, infrastructure, and network teams to maintain appropriate security visibility.
• Review security alerts and identify opportunities to improve detection quality, reduce false positives, and strengthen response processes.
• Maintain documentation for detection logic, incident response procedures, automation, and security operations workflows.
• Provide technical guidance and mentorship to Tier 1 and Tier 2 security analysts.
• Participate in incident response activities and an on-call rotation when required.

Conocimientos

SIEM

Incident Response

Educación

Security+

Herramientas

PowerShell

Python

Descripción del empleo

AccruePartners is seeking a senior cybersecurity professional to join our established security operations team. You will own the day-to-day management, health, tuning, and advancement of the organization's SIEM platform and contribute to the ongoing modernization of detection capabilities.

In this role you will develop and tune analytics, respond to incidents, build SOAR playbooks, and mentor junior analysts while coordinating with identity, endpoint, and network teams.