Security Engineer - Remote, Flexible Hours & SIEM Mastery

Gcore

United States

Hybrid

USD 90,000 - 130,000

Full time

14 days+

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Benefits offered by this job

Competitive compensation

Flexible hours & hybrid/remote options

Global remote work up to 45 days/year

Private medical insurance

Extra vacation & sick leave

Language courses

Modern offices with snacks & events

Team sports & social activities

Job summary

HellaGoodAudio is seeking a Security Operations/Engineering professional in the United States. You will operate Defender XDR, Entra ID, and SIEM to protect networks and endpoints, while triaging incidents and improving controls.

You will run phishing defenses, manage access reviews, and help align with ISO/IEC 27001, SOC 2, and related standards. You will also lead security awareness programs, oversee audits, and review new third-party software with Legal teams, ensuring robust security across

Qualifications

Experience in security operations or security engineering.
Hands-on experience with the Microsoft security stack (Defender XDR, Entra ID, Intune, Exchange Online) and a SIEM.
Solid understanding of networking and Windows, macOS, and Linux administration.
Familiarity with ISO/IEC 27001, SOC 2, and other security compliance frameworks.
Scripting skills for automation (PowerShell, Python, or Bash).
Ability to explain security topics to non-technical audiences; fluent English.

Responsibilities

Operate and automate security tooling to protect networks, systems, and apps.
Monitor and triage security events, investigate incidents, and prepare incident reports.
Handle phishing reports and maintain email protection controls.
Plan and implement network security measures and define OS/network/service security requirements.
Manage device security and compliance through MDM and track endpoint vulnerabilities remediation.
Ensure access reviews and cleanup of groups/permissions.
Run company-wide security awareness programs with training and phishing simulations.
Control compliance with security standards and maintain related policies.
Support audits (ISO/IEC 27001, SOC 2, PCI DSS) with evidence collection (Vanta).
Review security of third-party software, SaaS, and AI tools with Legal.