Remote SOC Security Engineer: Detection & Automation

Jobgether; United States; Remote; USD 81,000 - 99,000; Full time

Benefits offered by this job

Fully remote work

Flexible hours

30 days vacation

Apple MacBook and equipment

Health insurance and pension

Professional development

Job summary

Jobgether is seeking a Security Engineer (SOC) for a fully remote role based in the United States. You will lead detection engineering, strengthen monitoring, and automate investigation and response workflows across SIEM, SOAR, EDR, and XDR platforms, leveraging AI tools with a focus on secure, responsible adoption.

You will work with MITRE ATT&CK, Sigma, KQL, and SPL while integrating threat intelligence and CI/CD pipelines. Fluent German and English are required for client-facing collaboration.

Qualifications

• At least five years of experience in IT or cybersecurity, including architecture or consulting roles.
• Broad technical knowledge across networks, endpoints, identity, applications, and cloud environments.
• Experience with Zero Trust architectures, network segmentation, and IAM/PAM technologies.
• Strong understanding of ISO 27001, NIST CSF, MITRE ATT&CK, SABSA/TOGAF.
• Fluency in German and English is required in a consulting environment.

Responsibilities

• Build, operate, and improve SOC platforms (SIEM, SOAR, EDR, XDR).
• Integrate new log sources via parsing, normalization, data quality.
• Develop detection rules and use cases aligned with MITRE ATT&CK.
• Automate investigations with Python/PowerShell and runbooks.
• Establish Detection-as-Code pipelines with version control and CI/CD.
• Integrate threat intelligence into monitoring workflows.
• Collaborate with analysts to reduce false positives and improve detections.
• Provide technical support during incidents and document concepts.

Skills

Security engineering

SOC operations

Detection engineering

Python scripting

PowerShell scripting

MITRE ATT&CK

Zero Trust

IAM/PAM

AI governance awareness

Tools

Sigma

KQL

SPL

SIEM

SOAR

EDR

XDR

Job description

Jobgether is seeking a Security Engineer (SOC) for a fully remote role based in the United States. You will lead detection engineering, strengthen monitoring, and automate investigation and response workflows across SIEM, SOAR, EDR, and XDR platforms, leveraging AI tools with a focus on secure, responsible adoption.

You will work with MITRE ATT&CK, Sigma, KQL, and SPL while integrating threat intelligence and CI/CD pipelines. Fluent German and English are required for client-facing collaboration.