Remote Security Operations Engineer — SIEM & SOAR Specialist

Social Leverage LLC; Brazil (IN); A distancia; USD 120.000 - 180.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Competitive salary

Stock options

New hire home-office setup

Descripción de la vacante

Alpaca is seeking a Security Operations Engineer to own the daily operation and continuous improvement of SIEM and SOAR capabilities. You will onboard security logs, develop detections, keep alerts actionable, and maintain dashboards as the business grows.

You will work cross-functionally with IT, DevOps, and Engineering in a fully remote, distributed team environment. Expect on-call responsibilities and collaboration across security incidents.

Formación

• 3+ years of experience in Security Operations or detection engineering.
• Hands-on experience operating and tuning a SIEM.
• Experience building SOAR playbooks or equivalent response automation.
• Experience onboarding and parsing log sources from cloud, identity, and SaaS platforms.
• Strong alert investigation skills across identity, endpoint, network, and cloud environments.
• Willing to participate in an on-call rotation.
• Strong written and verbal communication skills, especially during incidents.

Responsabilidades

• Onboard security log sources across cloud, identity, endpoint, SaaS, and application systems, including parsing, normalization, and data quality checks.
• Build, test, and tune detection rules based on threat intel and incident learnings, mapped to MITRE ATT&CK.
• Tune, enrich, and manage the lifecycle of detections so alerts remain actionable.
• Maintain detections for critical systems and priority attack techniques.
• Build and maintain dashboards for alert volume, ingest health, and response status.
• Support security incidents with evidence collection, detection queries, and containment actions.
• Develop and improve alert-handling and incident response runbooks and escalation paths.
• Track and report security operations metrics (MTTD/MTTR).
• Participate in on-call rotation after onboarding.

Conocimientos

Security Operations

Detection engineering

SIEM operations

SOAR automation

Linux

Python

Log onboarding

Incident response

Herramientas

SIEM

SOAR

GitOps

CI/CD

Descripción del empleo

Alpaca is seeking a Security Operations Engineer to own the daily operation and continuous improvement of SIEM and SOAR capabilities. You will onboard security logs, develop detections, keep alerts actionable, and maintain dashboards as the business grows.

You will work cross-functionally with IT, DevOps, and Engineering in a fully remote, distributed team environment. Expect on-call responsibilities and collaboration across security incidents.