Security Engineer

Sourcepass; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

Sourcepass is seeking a Security Engineer to design, deploy, and maintain security platforms supporting managed services and client environments. You will own the technical quality and operational health of security tooling across onboarding, migration, steady-state operations, and offboarding.

You will partner with SOC analysts, service delivery teams, vendors, and clients to improve detection coverage, automate repeatable tasks, resolve escalations, and ensure controls remain measurable and

Qualifications

• Design, deploy, configure, and maintain security technologies across endpoint protection, EDR/MDR, SIEM, SOAR, and related integrations.
• Monitor health, licensing, and coverage; investigate gaps and drive issues to resolution.
• Build SIEM detections, alert rules, enrichment logic, and automation workflows.
• Tune alerts to reduce duplicates and improve fidelity.
• Provide advanced escalation support for security tools and deployments.

Responsibilities

• Partner with SOC operations to translate incident and alert trends into engineering improvements.
• Coordinate with clients, internal service teams, and vendors to communicate requirements, implementation plans, risks, dependencies, status, and technical outcomes.
• Participate in implementation reviews, troubleshooting sessions, operational handoffs, and service-improvement initiatives.
• Respond to events and alerts and resolve issues.
• Maintain platform health and coverage across onboarding, migration, steady-state operations, and offboarding.

Skills

Advanced security analytics

Incident response

Communication skills

Problem-solving

Team collaboration

Tools

SIEM

SOAR

EDR/MDR

Vulnerability management

Identity security

Email security

Job description

The Security Engineer designs, deploys, integrates, and maintains the security platforms that support Sourcepass managed security services and client environments. This role owns the technical quality and operational health of security tooling across onboarding, migration, steady-state operations, and offboarding. The engineer partners with SOC analysts, service delivery teams, vendors, and clients to improve detection coverage, automate repeatable work, resolve escalations, and ensure that deployed controls remain measurable, supportable, and aligned to service requirements.

Requirements

• Design, deploy, configure, and maintain security technologies across endpoint protection, EDR/MDR, SIEM, SOAR, vulnerability management, identity security, email security, security awareness, backup security, and related integrations.
• Monitor platform health, data ingestion, agent coverage, licensing, connector status, policy drift, and service availability; investigate gaps and drive issues through resolution.
• Build and maintain SIEM detections, alert rules, enrichment logic, integrations, and automation workflows that improve alert fidelity and reduce repetitive analyst effort.
• Identify non-actionable, duplicate, or consistently benign alerts and recommend evidence-based tuning, correlation, allowlisting, severity changes, or automation while documenting security impact and compensating controls.
• Provide advanced technical escalation support for security tools, failed deployments, integration issues, telemetry gaps, and complex client environments.
• Partner with SOC operations to translate incident and alert trends into engineering improvements, including new detections, response actions, automation, and platform hardening.
• Understanding of networks, workstation, and server related technologies with a concentration in security concepts
• Coordinate with clients, internal service teams, and vendors to communicate requirements, implementation plans, risks, dependencies, status, and technical outcomes.
• Participate in implementation reviews, troubleshooting sessions, operational handoffs, and service-improvement initiatives.
• Self-driven problem-solving abilities, with the capability to learn
• Respond to events and alerts and resolve issues
• Good interpersonal and relational team-building skills