Security Operations Engineer

The Intersect Group

Chapel Hill (NC)

On-site

USD 156,000 - 166,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

A leading company is seeking a Security Operations Engineer to enhance security measures and respond to threats. The ideal candidate will have extensive experience in endpoint security and incident response, along with strong scripting skills. This role requires collaboration across teams to ensure compliance and improve security posture.

Qualifications

8+ years of experience in security operations.
Strong knowledge of Windows and Linux systems.
Ability to write scripts for automation.

Responsibilities

Monitor and respond to security threats.
Identify and prioritize vulnerabilities.
Develop scripts/tools to optimize security processes.

Skills

Endpoint Security

Incident Response

Vulnerability Management

Scripting

Problem Solving

Communication

Education

Bachelor’s degree in Computer Science

Tools

CrowdStrike

Defender ATP

SIEM systems

Job description

Get AI-powered advice on this job and more exclusive features.

This range is provided by The Intersect Group. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

Base pay range

$75.00/hr - $80.00/hr

We’re seeking a Security Operations Engineer to protect enterprise systems and data by detecting and responding to security threats, implementing proactive security measures, and driving strategic initiatives to enhance our security posture. This role requires deep technical expertise, analytical thinking, and the ability to operate effectively in a complex, hybrid IT environment.

What You'll Do

Monitor, detect, and respond to security threats across enterprise systems.
Identify and prioritize vulnerabilities; propose and implement mitigation strategies.
Perform static and dynamic analysis of suspicious files, URLs, or behaviors.
Coordinate enterprise incident response efforts and ensure timely resolution.
Enhance endpoint, logging, and network monitoring capabilities.
Lead and contribute to strategic security initiatives and red-teaming activities.
Develop scripts/tools to automate and optimize security processes.
Generate detailed reports and presentations for both technical and executive stakeholders.
Ensure compliance with regulatory frameworks (e.g., FedRAMP, SOC 2).
Manage EDR platforms (e.g., CrowdStrike, Defender ATP) and SIEM systems.

Required Qualifications

8+ years of experience in Endpoint Security, Incident Response, SIEM, and Vulnerability Management.
Strong knowledge of Windows and Linux operating systems and scripting (PowerShell, Bash, Python, etc.).
Experience analyzing and responding to threats in hybrid cloud/on-prem environments.
Advanced understanding of TCP/IP, HTTP, DNS, and common network protocols.
Ability to write and leverage scripts that interact with APIs for automation.
Excellent problem-solving, communication, and documentation skills.
Bachelor’s degree in Computer Science, Information Security, or equivalent work experience.

Preferred Qualifications

Certifications such as CISSP, CEH, GIAC, Security+, Linux+.
Experience in container security and evaluating image vulnerabilities.
Familiarity with cloud security architectures, forensics, malware analysis, and cryptography.
Proven ability to triage alerts, streamline response, and eliminate false positives.
Background working in regulated environments (e.g., SOC 2, FedRAMP).
Experience with EDR tools such as Microsoft Defender ATP, Cisco AMP, or CrowdStrike.

Seniority level