Security Automation & Threat Detection Engineer (Hybrid)

DeWinter Group; Foster City (CA); Hybrid; USD 140,000 - 210,000; Part time

Benefits offered by this job

Hybrid work arrangement

Job summary

DeWinter Group is seeking an Information Security Engineer in Foster City, CA, to strengthen security operations through automation, threat hunting, and advanced detection engineering. The role focuses on maintaining SIEM and SOAR platforms, developing automated response workflows, and tuning detection capabilities while investigating sophisticated cyber threats.

The ideal candidate has 6+ years in security engineering, hands-on SOC experience, and strong Python scripting for security

Qualifications

• 6+ years in security engineering supporting SOC or similar
• Experience with SIEM platforms: detection rules, dashboards, alert tuning
• Experience with SOAR platforms (XSOAR, Splunk SOAR, or Tines)
• Python for security automation and integrations
• Strong incident response methodologies and threat intelligence knowledge
• Familiarity with MITRE ATT&CK and NIST frameworks
• Ability to build automation workflows for threat detection and response
• API-based tool integrations and threat intel feeds
• Threat hunting experience
• Excellent documentation skills and cross-functional collaboration

Responsibilities

• Support SOC operations with detection engineering and threat hunting
• Maintain and optimize SIEM and SOAR platforms
• Develop automated response workflows and playbooks
• Tune detection rules, dashboards, and alerts for accuracy
• Investigate sophisticated cyber threats and incidents
• Collaborate with Information Security and cross-functional teams
• Document detection rules, workflows, and incident procedures

Skills

SOC experience

SIEM platforms

SOAR platforms

Python for security automation

Incident response

Threat intelligence

APIs & scripts

Threat hunting

Documentation

Cross-functional collaboration

Tools

Palo Alto Cortex XSOAR

Splunk SOAR

Tines

Python

Job description

DeWinter Group is seeking an Information Security Engineer in Foster City, CA, to strengthen security operations through automation, threat hunting, and advanced detection engineering. The role focuses on maintaining SIEM and SOAR platforms, developing automated response workflows, and tuning detection capabilities while investigating sophisticated cyber threats.

The ideal candidate has 6+ years in security engineering, hands-on SOC experience, and strong Python scripting for security