Security Engineer II

The CORE Institute; Phoenix (AZ); Hybrid; USD 110,000 - 160,000; Full time

Benefits offered by this job

Work from home

Job summary

The CORE Institute seeks a SOC Engineer to design and enhance Security Operations Center capabilities in 24x7 environments. You will integrate SIEM tools, automate security workflows, and collaborate with IT, DevOps, and business units to align security with operations.

Qualifications include a Bachelor's in a related field and 4–6 years in SOC engineering, security design, and cloud security (Azure/AWS). Remote-friendly role with enterprise security focus.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, or a related field.

Responsibilities

• SOC workflows, log management, and SIEM solutions.
• Security operations collaboration with IT, DevOps, and clients.
• Incident detection, investigation, and response support.
• Threat hunting and detection improvements.
• Security reference engineering for networks and cloud.

Skills

SOC Engineering

Security Operations

Network Security

Threat Intelligence

Security Design

Azure Cloud

Education

Bachelor's degree in Cybersecurity, Information Technology, or a related field

Tools

Splunk

Microsoft Sentinel

IBM QRadar

Palo Alto Networks

Fortinet FortiGate

Cisco

Check Point

AWS

Azure

Google Cloud

Python

PowerShell

Bash

Job description

• SOC Engineering – Engineer and enhance Security Operations Center (SOC) capabilities, integrating security monitoring tools, SIEM solutions, and automation workflows in 24x7 mission critical environments.
• Security Operations Enablement – Develop and implement security frameworks and processes that enhance the efficiency of security operations teams in multi-tenant and geographically diverse client environments.
• Endpoint Security Management – Deploy, enhance, and maintain enterprise security solutions to align with best practices to minimize attack surfaces, threats, and security risks within the supported environments.
• Incident Response Support – Work closely with SOC analysts to refine incident detection, investigation, and response capabilities including participation in 24x7 on-call escalation rotations.
• Threat Intelligence Integration – Integrate threat intelligence feeds and analytics to improve proactive threat detection and mitigation.
• Risk Management & Compliance – Ensure security controls comply with industry regulations such as NIST, ISO 27001, and SOC 2 including diligence assessments for new environments and new clients.
• Security Engineering Development – Define and document security reference engineering and best practices for network and cloud environments.
• Automation & Orchestration – Implement automation strategies for security processes, including security policy management and security alert triaging.
• Stakeholder Collaboration – Work with IT, DevOps, and business units to align security policies with operational goals.
• Continuous Improvement – Monitor emerging threats, security trends, and best practices to enhance enterprise security posture.

EDUCATION

• Bachelor's degree in Cybersecurity, Information Technology, or a related field.

EXPERIENCE

• IT Systems Engineering – 4-6 years of experience in engineering enterprise IT platforms.
• Security Engineering – 4-6 years of experience managing and implementing enterprise security solutions.
• SOC Engineering & Security Operations – 4-6 years in SOC engineering, incident response, or security automation.
• Network Security – Proven experience contributing to the design and securing of network platforms, including VPNs, proxies, and IDS/IPS solutions.
• Threat Intelligence & Detection – At least 4-6 years of experience working with SIEM platforms, threat hunting, and endpoint detection response (EDR) solutions.
• Security Design – 4-6 years of experience in security design and implementation.
• Azure Cloud Solutions – Proven expertise in designing and deploying Azure cloud solutions including security.

REQUIREMENTS

• Preferred Certifications – CISSP, GIAC (GSEC, GCIA, GCIH), CCNP Security, Palo Alto Networks PCNSA/PCNSE, Fortinet FCP/FCSS or equivalent.
• Security Management – Certified Information Security Manager (CISM) preferred.

KNOWLEDGE

• Security Operations – In-depth understanding of SOC workflows, log management, and SIEM solutions (Splunk, Sentinel, QRadar, etc.).
• Firewall Technologies – Expertise in firewalls, including Palo Alto, Fortinet, Cisco, or Check Point.
• Cloud Technologies – In-depth understanding of cloud computing principles, serverless architectures, and cloud-native development.
• Cloud Security – Familiarity with cloud security models in AWS, Azure, and Google Cloud.
• Security Standards & Compliance – Knowledge of cybersecurity principles, authentication protocols (OAuth, SAML).
• Regulatory Frameworks – Strong knowledge of compliance standards and best practices such as NIST, ISO 27001, SOC-2, PCI-DSS, HIPAA, and GDPR.
• Automation & Scripting – Experience with Python, PowerShell, or Bash for security automation.
• Continuous Learning Mindset – Passion for staying up to date with industry trends, emerging technologies, and best practices.

SKILLS

• Security Design – Ability to contribute to the design and implementation of secure architectures.
• Security Automation – Proficiency in automating security processes and threat detection workflows.
• Automation & Scripting – Proficiency in PowerShell, Terraform, and ARM templates.
• Project Management – Ability to manage security projects and drive cross-functional initiatives (moderate).
• Project & Time Management – Skill in managing multiple projects, prioritizing tasks, working independently, and delivering high-quality solutions within deadlines.

ABILITIES

• Incident Response & Threat Hunting – Strong analytical skills for investigating security incidents.
• Communication & Leadership – Strong ability to present security concepts to technical and non-technical stakeholders.
• Strategic Thinking – Align security initiatives with business and IT strategies.
• Risk Assessment – Identify and prioritize security risks with data-driven analysis.
• Technical Leadership – Guide teams in implementing best practices for security operations.
• Adaptability – Stay ahead of emerging cybersecurity threats and technologies.
• Detail-Oriented – Maintain strong attention to detail and organizational skills.
• Leadership & Mentorship – Occasionally mentor and serve as Project Lead for technical teams, fostering technical growth and collaboration.
• Effective Communication – Ability to translate complex (Moderate-High) technical concepts into clear insights for both technical and non-technical audiences.

ENVIRONMENTAL WORKING CONDITIONS

• Normal office environment – Work from home – fully remote
• May require some travel.

PHYSICAL/MENTAL DEMANDS

• Requires sitting and standing associated with a normal office environment.
• Manual dexterity using a calculator and computer keyboard.

ORGANIZATIONAL REQUIREMENTS

• HOPCo Mission, Vision and Values must be acknowledged and adhered to

This description is intended to provide only basic guidelines for meeting job requirements. Responsibilities, knowledge, skills, abilities and working conditions may change as needs evolve.

Equal Opportunity Employer
This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor.