Remote Mid-Level SOC Security Engineer (MDR)

UnderDefense; United States; Remote; USD 90,000 - 130,000; Full time

Job summary

UnderDefense Inc. is seeking a Middle SOC Security Engineer to join our MDR Engineering team.

The role focuses on configuring, maintaining, and improving security monitoring infrastructures across client environments with hands-on SIEM experience. The candidate should be comfortable with Elastic Security, Splunk, or Microsoft Sentinel, and be able to integrate diverse log sources, develop parsers, and craft detection rules.

Qualifications

• Hands-on experience with at least one SIEM platform (Elastic, Splunk, or Microsoft Sentinel).
• Experience with log collection, processing, analysis, or security integrations.
• Understanding of Windows, Linux, networking fundamentals, and common protocols.
• Familiarity with Syslog, APIs, JSON, and log formats.
• Experience writing SIEM queries and working with detection/correlation rules.
• Understanding of EDR/XDR technologies and their role in security monitoring.
• Strong troubleshooting and analytical problem-solving skills.
• Basic scripting in Bash, Python, or PowerShell.
• Ability to investigate issues independently and own tasks.
• Willingness to learn new technologies and adapt to client environments.
• English communication skills for direct client discussions.

Responsibilities

• Configure, maintain, and troubleshoot SIEM platforms (Elastic Security, Splunk, Microsoft Sentinel).
• Integrate log sources from Windows, Linux, networks, cloud services, Microsoft 365, and EDR/XDR solutions.
• Configure log collection via agents, connectors, APIs, and Syslog.
• Develop and maintain parsers for log sources and optimize detection rules.
• Maintain SIEM indexes and log ingestion volumes; manage retention policies.
• Support onboarding of new clients and ensure proper SOC monitoring integration.
• Collaborate with engineers to automate tasks and improve processes.

Skills

SIEM experience

Log collection

Windows/Linux

Scripting

EDR/XDR knowledge

Troubleshooting

English

Tools

Elastic Stack

Splunk

Microsoft Sentinel

CrowdStrike

Job description

UnderDefense Inc. is seeking a Middle SOC Security Engineer to join our MDR Engineering team.

The role focuses on configuring, maintaining, and improving security monitoring infrastructures across client environments with hands-on SIEM experience. The candidate should be comfortable with Elastic Security, Splunk, or Microsoft Sentinel, and be able to integrate diverse log sources, develop parsers, and craft detection rules.