Remote Security Operations Engineer - SIEM, SOAR, Stock Options

Diagram; United States; Remote; USD 110,000 - 150,000; Full time

Benefits offered by this job

Stock options

Health benefits

Home-office setup allowance ($500)

Monthly card stipend ($150)

Job summary

Alpaca is seeking a Security Operations Engineer to own the daily operation and continuous improvement of Alpaca’s SIEM and SOAR capabilities. You will onboard security logs, develop detections, keep alerts actionable, maintain operational dashboards, and automate repeatable response actions.

You will be hands-on and operationally minded, ensuring log onboarding, detection quality, and alert handling, turning security signals into action as the business grows.

Qualifications

• 3+ years of experience in Security Operations or detection engineering roles.
• Hands-on experience operating and tuning a SIEM.
• Experience building SOAR playbooks or equivalent response automation.
• Working with Linux.
• Scripting or automation experience (Python, Bash) for security operations tasks.
• Experience onboarding and parsing log sources from cloud, identity, and SaaS platforms.
• Strong alert investigation skills across identity, endpoint, network, and cloud environments.
• Willing to participate in an on-call rotation.

Responsibilities

• Log Onboarding: onboard new security log sources across cloud, identity, endpoint, SaaS, and application systems.
• Detection Development: build, test, and tune detection rules mapped to MITRE ATT&CK.
• Alert Quality: tune and manage the lifecycle of detections.
• Detection Coverage: maintain detections for critical systems and priority techniques.
• Operational Dashboards: build dashboards for alert volume and ingest health.
• Incident Support: assist security incidents with evidence collection and containment actions.
• Runbooks: develop and improve alert-handling and incident response playbooks.
• Threat hunting: run hypothesis-driven hunts and translate findings into detections.

Skills

SIEM operation

SOAR automation

Linux

Python

Bash

Log onboarding

Incident response

Threat hunting

On-call readiness

Job description

Alpaca is seeking a Security Operations Engineer to own the daily operation and continuous improvement of Alpaca’s SIEM and SOAR capabilities. You will onboard security logs, develop detections, keep alerts actionable, maintain operational dashboards, and automate repeatable response actions.

You will be hands-on and operationally minded, ensuring log onboarding, detection quality, and alert handling, turning security signals into action as the business grows.