Remote Security Operations Platform Engineer

First Quality; Pennsylvania; On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Competitive base salary

Bonus opportunities

Paid time off

Medical, dental & vision

401(k) with company match

Parental leave

Job summary

First Quality Enterprises, LLC is seeking a Security Operations Platform Engineer to join our remote SOC team. You will design, implement, and optimize our SIEM/SOAR platform, ensuring reliable log ingestion, threat detection, alerting, and automation across on-prem and cloud sources.

The ideal candidate has 3+ years of SIEM experience, scripting skills (Python/PowerShell), and familiarity with MITRE ATT&CK and threat intel. Travel up to 5 days/year.

Qualifications

• Bachelor’s degree in Cybersecurity, IT, or related field (or equivalent experience).
• 3+ years of experience managing a SIEM platform.
• Experience with SIEM query languages and scripting for automation.

Responsibilities

• Configure and maintain SIEM/SOAR platform for log ingestion, detection, and alerting.
• Monitor platform performance, data health, and maintenance of integrations.
• Develop and tune detection rules, thresholds, and dashboards for SOC operations.
• Collaborate with SOC analysts during investigations to provide platform support and data access.
• Build and maintain data pipelines, parsing rules, and data mappings for normalization.
• Create reports and dashboards for stakeholders and executives.

Skills

SIEM management

SOAR platform

Python

PowerShell

MITRE ATT&CK

Threat intelligence

Incident response

Cloud log configurations

Data normalization (CEF/LEEF/JSON)

Scripting for automation

Education

Bachelor’s degree in Cybersecurity/IT or related field

Tools

Azure

AWS

GCP logs

SIEM

SOAR

Job description

First Quality Enterprises, LLC is seeking a Security Operations Platform Engineer to join our remote SOC team. You will design, implement, and optimize our SIEM/SOAR platform, ensuring reliable log ingestion, threat detection, alerting, and automation across on-prem and cloud sources.

The ideal candidate has 3+ years of SIEM experience, scripting skills (Python/PowerShell), and familiarity with MITRE ATT&CK and threat intel. Travel up to 5 days/year.