Security Engineer: SIEM & SOAR Detection & Automation

guidepointsecurity; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

GuidePoint Security in the United States is seeking a skilled Security Engineer to support the implementation, optimization, and operations of security operations technologies. You will help develop telemetry pipelines, SIEM detection content, and security automation to deliver value to clients and internal teams.

The role requires strong troubleshooting and client communication, with the ability to lead through influence, manage scope and data volume, and collaborate with SOC analysts,

Qualifications

• 3–5 years of SIEM/SOAR architecture, implementation, and troubleshooting experience.
• Experience in log ingestion and data aggregation strategies.
• Expertise creating security content for SIEM platforms and dashboards.
• Experience with SOAR platforms and automation playbooks.
• Familiar with key security events and incident data.

Responsibilities

• Architect, deploy, and maintain SIEM platforms across cloud and on‑prem sources.
• Onboard log sources from Azure, AWS, GCP, identity, endpoint, network, and apps.
• Develop and tune detection rules and analytics mapped to MITRE ATT&CK.
• Build dashboards and metrics for SOC operations and audits.
• Monitor SIEM health, data quality, and performance; optimize costs.
• Design, build, and maintain SOAR playbooks for triage and response.
• Collaborate with SOC analysts and clients; participate in on‑call rotation.

Skills

SIEM/SOAR engineering

Log ingestion and aggregation

Threat detection logic & dashboards

SOAR playbooks

Security events familiarity

Tools

Splunk ES

CrowdStrike NG-SIEM

Elastic Security

Palo Alto XSIAM

Google SecOps

Microsoft Sentinel

SentinelOne AI SIEM

Job description

GuidePoint Security in the United States is seeking a skilled Security Engineer to support the implementation, optimization, and operations of security operations technologies. You will help develop telemetry pipelines, SIEM detection content, and security automation to deliver value to clients and internal teams.

The role requires strong troubleshooting and client communication, with the ability to lead through influence, manage scope and data volume, and collaborate with SOC analysts,