Security Engineer (SOC)

Jobgether; United States; Remote; USD 81,000 - 99,000; Full time

Benefits offered by this job

Fully remote work

Flexible hours

30 days vacation

Apple MacBook and equipment

Health insurance and pension

Professional development

Job summary

Jobgether is seeking a Security Engineer (SOC) for a fully remote role based in the United States. You will lead detection engineering, strengthen monitoring, and automate investigation and response workflows across SIEM, SOAR, EDR, and XDR platforms, leveraging AI tools with a focus on secure, responsible adoption.

You will work with MITRE ATT&CK, Sigma, KQL, and SPL while integrating threat intelligence and CI/CD pipelines. Fluent German and English are required for client-facing collaboration.

Qualifications

• At least five years of experience in IT or cybersecurity, including architecture or consulting roles.
• Broad technical knowledge across networks, endpoints, identity, applications, and cloud environments.
• Experience with Zero Trust architectures, network segmentation, and IAM/PAM technologies.
• Strong understanding of ISO 27001, NIST CSF, MITRE ATT&CK, SABSA/TOGAF.
• Fluency in German and English is required in a consulting environment.

Responsibilities

• Build, operate, and improve SOC platforms (SIEM, SOAR, EDR, XDR).
• Integrate new log sources via parsing, normalization, data quality.
• Develop detection rules and use cases aligned with MITRE ATT&CK.
• Automate investigations with Python/PowerShell and runbooks.
• Establish Detection-as-Code pipelines with version control and CI/CD.
• Integrate threat intelligence into monitoring workflows.
• Collaborate with analysts to reduce false positives and improve detections.
• Provide technical support during incidents and document concepts.

Skills

Security engineering

SOC operations

Detection engineering

Python scripting

PowerShell scripting

MITRE ATT&CK

Zero Trust

IAM/PAM

AI governance awareness

Tools

Sigma

KQL

SPL

SIEM

SOAR

EDR

XDR

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Security Engineer (SOC) based in United States. Join a cybersecurity consulting environment focused on protecting IT, OT, cloud, and AI systems against evolving digital threats. As a Security Engineer specializing in Security Operations Center (SOC) technologies, you will lead detection engineering initiatives, strengthen security monitoring, and automate investigation and response workflows. You will work with SIEM, SOAR, EDR, and XDR platforms to improve detection accuracy and operational efficiency. AI-powered tools will support routine analysis and documentation, allowing you to focus on technical validation, strategic improvements, and tailored security solutions. Data confidentiality and responsible AI adoption remain central to every project. This fully remote opportunity combines complex cybersecurity challenges, technical innovation, and the potential for substantial performance-based earnings.

Accountabilities

• Build, operate, and continuously improve SOC platforms, including SIEM, SOAR, EDR, and XDR solutions.
• Integrate new log sources by managing parsing, normalization, and data quality.
• Develop and optimize detection rules and use cases using Sigma, KQL, and SPL, aligned with the MITRE ATT&CK framework.
• Automate security analysis and incident response through playbooks and scripting with Python and PowerShell.
• Establish Detection-as-Code pipelines with version control, testing, and CI/CD integration.
• Integrate threat intelligence into security monitoring and operational workflows.
• Collaborate with security analysts and incident responders to reduce false positives and improve detection quality.
• Provide technical support during security incidents and contribute to effective response activities.
• Create and maintain runbooks, use-case documentation, and technical concepts.
• Use AI-assisted tools to analyze logs, draft detection rules and playbooks, and produce documentation, ensuring all outputs are critically reviewed and validated before use.
• Apply strict data protection practices when using AI tools, preventing unauthorized disclosure and ensuring sensitive customer information is handled appropriately.

Requirements

• At least five years of experience in IT or cybersecurity, including several years in architecture or consulting roles.
• Broad technical knowledge across networks, endpoints, identity, applications, and cloud environments.
• Experience with Zero Trust architectures, network segmentation, and IAM/PAM technologies, including Microsoft Entra ID and Active Directory.
• Strong understanding of security frameworks and methodologies, including ISO 27001, BSI IT-Grundschutz, NIST CSF, MITRE ATT&CK, and SABSA or TOGAF.
• Knowledge of cryptography, public key infrastructure (PKI), and secure application design.
• Confident use of AI tools in consulting workflows, including the ability to critically assess their outputs.
• Strong awareness of AI-related confidentiality and security risks, including data leakage, model training, and prompt injection.
• Willingness to continuously improve processes and products through responsible AI adoption.
• Professional fluency in both German and English.

Additional Qualifications That Would Be An Advantage

• Cloud architecture expertise covering the design, security, and operation of cloud and hybrid environments across Azure, AWS, or GCP.
• Familiarity with cloud-native security services and Infrastructure as Code.
• Experience with prompt engineering, AI agents, or integrating large language models (LLMs) into workflows.
• Knowledge of AI governance frameworks and regulations, including the EU AI Act, ISO/IEC 42001, and the OWASP Top 10 for LLM Applications.
• Experience working in regulated environments, such as critical infrastructure (KRITIS), financial services, or industrial and OT settings.
• Relevant security certifications, such as OSDA, OSCP, SANS/GIAC certifications (including GCDA, GDSA, and GCIH), SANS SEC586, or Microsoft SC-200.

Benefits

• Competitive compensation: Fixed annual salary starting at €80,000, plus profit sharing of up to €70,000.
• Fully remote work: Location-independent work on cybersecurity and AI security projects.
• Flexible working hours: Greater flexibility in organizing your working day.
• Generous leave: 30 days of annual vacation.
• Technology equipment: Apple MacBook and other necessary IT equipment.
• Retirement and health benefits: Occupational pension provision and health insurance.
• Employee discounts: Access to shopping offers and employee discounts.
• Team events: Regular opportunities to connect and collaborate with colleagues.
• Permanent employment: An open-ended employment contract.
• Professional development: Opportunities to deepen your expertise in SOC platforms, detection engineering, automation, cloud security, and responsible AI adoption.
• Meaningful technical work: Contribute to security projects that help protect critical digital environments and strengthen modern security operations.

We appreciate your interest and wish you the best!

Data Privacy Notice

By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

We may use artificial intelligence (AI) tools to support parts of the hiring process, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.