Onsite SIEM/SOAR Engineer: Automation & Threat Hunting

Lancesoft; Foster City (CA); On-site; USD 110,000 - 117,000; Full time

Job summary

Lancesoft is seeking an Information Security Engineer in Foster City, CA to strengthen security posture through automation, threat hunting, and incident response.

The ideal candidate has 6+ years in a SOC-like role, hands-on experience with SIEM and SOAR (Palo Alto Cortex XSOAR, Splunk SOAR, or Tines) and strong Python scripting skills to develop automated workflows and detection rules.

Qualifications

• 6+ years in a Security Engineering role supporting a SOC environment.
• Demonstrable experience with SOAR platforms and playbook development.
• Proficiency in Python for scripting and automation of security tasks.
• Strong incident response methods, threat intel, and cybersecurity frameworks (MITRE ATT&CK, NIST).
• Excellent analytical and problem-solving skills in a fast-paced setting.

Responsibilities

• SIEM and SOAR Platform Management: maintain platforms, tune rules, dashboards, and reports.
• Automation and Scripting: develop integrations and automation workflows using Python.
• Incident Response and Threat Hunting: conduct proactive threat hunting and analyst-driven responses.
• Collaboration and Documentation: work with teams and document detection rules and playbooks.

Skills

SIEM

SOAR

Python scripting

Threat hunting

Incident response

Automation

Playbooks

Tools

Palo Alto Cortex XSOAR

Splunk SOAR

Tines

Job description

Lancesoft is seeking an Information Security Engineer in Foster City, CA to strengthen security posture through automation, threat hunting, and incident response.

The ideal candidate has 6+ years in a SOC-like role, hands-on experience with SIEM and SOAR (Palo Alto Cortex XSOAR, Splunk SOAR, or Tines) and strong Python scripting skills to develop automated workflows and detection rules.