Remote Security Ops Engineer – Incident Response

Truecommerce; United States; Remote; USD 110,000 - 165,000; Full time

Benefits offered by this job

401k with company match

PTO + holidays

Birthday, volunteer, summer days

Parental leave

Health, dental, vision insurance

Wellness reimbursement

Remote-first casual environment

Job summary

TrueCommerce is a remote-first global SaaS company enabling secure EDI connectivity for trading partners. We seek a hands-on Security Operations Engineer to investigate incidents, respond to threats, and drive endpoint security improvements using Defender for Endpoint, Cortex XDR, Entra ID, Intune, and Exchange Online.

You will script, tune detections, and build workflows to reduce manual tasks while collaborating with IT, infrastructure, engineering, and support teams across time zones.

Qualifications

• Four+ years of security operations, incident response, or security engineering.
• Hands-on experience with Defender for Endpoint and Cortex XDR.
• Ability to develop scripts and automate workflows.
• Strong written and verbal communication.

Responsibilities

• Lead security investigations and incident response from initial assessment through containment and closure.
• Triage and resolve security tickets from Defender, Cortex XDR, and vulnerability assessments.
• Own endpoint vulnerability management lifecycle and remediation coordination.
• Improve endpoint security workflows with scripts, detections tuning, and dashboards.
• Collaborate across time zones with IT, engineering, and Support teams.
• Participate in a shared on-call rotation and document investigations and actions.

Skills

Security operations

Incident response

Endpoint security

PowerShell scripting

Python scripting

Bash scripting

Windows troubleshooting

Threat hunting

Change management

Tools

Microsoft Defender for Endpoint

Cortex XDR

KQL

SIEM

Job description

TrueCommerce is a remote-first global SaaS company enabling secure EDI connectivity for trading partners. We seek a hands-on Security Operations Engineer to investigate incidents, respond to threats, and drive endpoint security improvements using Defender for Endpoint, Cortex XDR, Entra ID, Intune, and Exchange Online.

You will script, tune detections, and build workflows to reduce manual tasks while collaborating with IT, infrastructure, engineering, and support teams across time zones.