Security Engineer II — SOC & Threat Intel Lead

Socket.dev; Phoenix (AZ); On-site; USD 110,000 - 150,000; Full time

Job summary

Socket.dev is seeking a seasoned SOC Engineer to enhance security operations for 24x7 environments, integrating SIEMs and automation. You will lead incident response, threat hunting, and secure network/cloud designs while collaborating with IT, DevOps, and business units.

The role emphasizes security design, automation, and governance across Azure and cloud-native environments, with on-call rotations and on-site collaboration in a dynamic enterprise setting.

Qualifications

• Bachelor-level equivalent education in cybersecurity or IT with hands-on experience.
• CISSP, GIAC (GSEC, GCIA, GCIH), CCNP Security, PCNSA/PCNSE or equivalent preferred.
• CISM certification required for security management.

Responsibilities

• Engineer and enhance SOC capabilities and automation workflows for 24x7 environments.
• Implement security frameworks and processes for multi-tenant client environments.
• Deploy and maintain enterprise security solutions to minimize attack surfaces.
• Refine incident detection, investigation, and response with SOC analysts and engineers, including on-call rotations.
• Integrate threat intel feeds to improve proactive threat detection.
• Ensure security controls comply with NIST, ISO 27001, SOC 2, PCI-DSS, HIPAA, GDPR.

Skills

Security design

Incident response

Security automation

Project management

Communication & leadership

Strategic thinking

Risk assessment

Technical leadership

Adaptability

Automation & scripting

Detail-oriented

Leadership & mentorship

Effective communication

Project & time management

Education

Associate’s degree in Cybersecurity/IT

CISSP certification, GIAC certifications, CCNP Security, PCNSA/PCNSE

CISM certification

Tools

Splunk

Microsoft Sentinel

QRadar

Palo Alto Networks

Job description

Socket.dev is seeking a seasoned SOC Engineer to enhance security operations for 24x7 environments, integrating SIEMs and automation. You will lead incident response, threat hunting, and secure network/cloud designs while collaborating with IT, DevOps, and business units.

The role emphasizes security design, automation, and governance across Azure and cloud-native environments, with on-call rotations and on-site collaboration in a dynamic enterprise setting.