Security Engineer II — SOC, Threat Detection & Response

The CORE Institute; Phoenix (AZ); On-site; USD 110,000 - 160,000; Full time

Job summary

The CORE Institute in Phoenix, AZ seeks a seasoned SOC Engineer to design and enhance Security Operations Center capabilities, integrate SIEM tools, and automate workflows for 24x7 environments.

You will collaborate with IT and DevOps to implement security controls, respond to incidents, and advance threat detection, risk management, and cloud security across enterprise systems. The role requires 3–6 years in enterprise IT security and strong incident response and automation experience.

Qualifications

• Associate’s degree in Cybersecurity or IT is required.
• CISM certification required.
• 3–6 years IT Systems Engineering experience.
• 2–5 years Security Engineering experience.
• Minimum 3 years in SOC Engineering, incident response, or security automation.
• 3+ years designing secure network and cloud solutions.
• Azure cloud security design and implementation experience.

Responsibilities

• Engineer and enhance SOC capabilities and integrate monitoring tools.
• Implement security frameworks and processes for multi-tenant environments.
• Deploy, enhance, and maintain enterprise security solutions.
• Refine incident detection, investigation, and response; participate in 24x7 on-call rotations.
• Perform advanced analysis of threats and vulnerabilities.
• Integrate threat intelligence feeds for proactive detection.
• Ensure security controls comply with NIST, ISO 27001, SOC 2.
• Define security reference architecture for network and cloud environments.
• Implement automation strategies for security processes and alert triaging.
• Collaborate with IT, DevOps, and business units to align security policies.

Skills

SOC Engineering

Security Enablement

Endpoint Security

Incident Response

Threat Intelligence

Risk Management

Automation

Stakeholder Collaboration

Continuous Improvement

Azure Cloud

Education

Associate’s degree in Cybersecurity or IT

CISM Certification

CISSP / GIAC / CCNP Security / PCNSA/PCNSE

Tools

Splunk

Sentinel

QRadar

Palo Alto

Fortinet

Cisco

Check Point

Terraform

ARM templates

PowerShell

Python

Job description

The CORE Institute in Phoenix, AZ seeks a seasoned SOC Engineer to design and enhance Security Operations Center capabilities, integrate SIEM tools, and automate workflows for 24x7 environments.

You will collaborate with IT and DevOps to implement security controls, respond to incidents, and advance threat detection, risk management, and cloud security across enterprise systems. The role requires 3–6 years in enterprise IT security and strong incident response and automation experience.