Security Operations Engineer - Automation & Detection

Experis Technology Group; Greensboro (NC); Hybrid; USD 120,000 - 150,000; Full time

Benefits offered by this job

Hybrid work arrangement

Remote work considered

Job summary

Experis is seeking a Security Operations Engineer for a 6-9 month contract-to-hire in Greensboro, NC. Hybrid schedule with a preference for 3 days onsite; remote considered.

The role focuses on improving telemetry onboarding, data quality, detection content, and automation to reduce analyst workload within the Global Cyber Security Operations organization. The ideal candidate has 5+ years in Security Operations, Incident Response, and Security Engineering, with Defender for Cloud, Azure

Qualifications

• 5+ years of cybersecurity experience across Security Operations, Incident Response, and Security Engineering.
• Experience in SOC/Incident Response environments with strong security engineering background.
• Experience with Microsoft Defender suite and Azure security.

Responsibilities

• Improve security telemetry onboarding and data quality within Cribl environments.
• Develop, tune, and optimize security detections within the SIEM and ReliaQuest platforms.
• Design and implement automation workflows to reduce manual analyst effort.
• Enhance incident detection and response capabilities through advanced detection engineering.
• Build and maintain integrations between security tools and data sources.
• Improve operational visibility and monitoring across cloud and enterprise environments.
• Partner with Security Operations, Incident Response, and Security Engineering teams.

Skills

Security Operations

Incident Response

Security Engineering

Microsoft Defender Suite

Azure Cloud Security

Detection Engineering

Security Automation

Telemetry/Logs

Tools

ReliaQuest

Cribl

Azure DevOps

Microsoft Defender

SIEM tooling

Job description

Experis is seeking a Security Operations Engineer for a 6-9 month contract-to-hire in Greensboro, NC. Hybrid schedule with a preference for 3 days onsite; remote considered.

The role focuses on improving telemetry onboarding, data quality, detection content, and automation to reduce analyst workload within the Global Cyber Security Operations organization. The ideal candidate has 5+ years in Security Operations, Incident Response, and Security Engineering, with Defender for Cloud, Azure