Remote SecOps Engineer: SIEM/EDR & Incident Response

CoinsPaid; United States; Remote; USD 120,000 - 160,000; Full time

Benefits offered by this job

Benefit Bar - up to €230/month

Medical insurance or reimbursement

Language learning support

Relocation support

Job summary

Coinspaid Solutions is a fintech company seeking a Middle SecOps Engineer to join the Security Operations team. The role focuses on monitoring, detecting, and responding to threats across endpoints, networks, and cloud platforms, with strong SIEM/EDR and DLP experience.

You will collaborate with SOC analysts, DevOps, and IT to ensure effective threat containment and remediation, while contributing to playbooks and incident reporting. Remote-first, with flexible options for relocation as needed.

Qualifications

• Experience in SOC environments with SIEM/EDR usage.
• Hands-on incident response and threat detection.
• Experience triaging alerts and refining playbooks.
• Familiarity with DLP, vulnerability management, and logs.

Responsibilities

• Monitor security alerts across systems and triage threats.
• Lead end-to-end incident response: detect, contain, eradicate, recover.
• Identify false positives and provide actionable remediation guidance.
• Analyze OS, app, network, and cloud logs for investigations.
• Collaborate with DevOps and IT to remediate issues.
• Engage in vulnerability management and coordination.
• Follow and improve SOC playbooks and SOPs.
• Document incidents, investigations, and security events.
• Stay updated on emerging threats and technologies.

Skills

SIEM tuning

SOC operations

EDR/XDR

DLP technologies

Incident response

Vulnerability management

Log analysis

Threat hunting

Tools

Kubernetes

Job description

Coinspaid Solutions is a fintech company seeking a Middle SecOps Engineer to join the Security Operations team. The role focuses on monitoring, detecting, and responding to threats across endpoints, networks, and cloud platforms, with strong SIEM/EDR and DLP experience.

You will collaborate with SOC analysts, DevOps, and IT to ensure effective threat containment and remediation, while contributing to playbooks and incident reporting. Remote-first, with flexible options for relocation as needed.