Security Operations Engineer III

Allvue Systems, LLC; New York (NY); Hybrid; USD 120,000 - 170,000; Full time

Benefits offered by this job

Health benefits

Udemy membership

401K matching

Bonus potential

Flexible PTO

Donation matching

Team-building events

Job summary

AllvueSystems, a leading fintech software provider, is seeking a Security Operations Engineer III to strengthen detection, response, and automation across EDR, SIEM/SOAR, and email security. You will develop detections, investigate incidents, and contribute to threat hunts as part of the Information Security team.

You will operate with CrowdStrike, Rapid7, Mimecast, and Prisma GlobalProtect, build automation with PowerShell and Python, and drive security improvements while balancing risk and

Qualifications

• Minimum 5 years of relevant professional experience.
• Experience in security operations, detection engineering, threat hunting, and incident response.
• Certifications in security are preferred but not required.

Responsibilities

• Develop, tune, test, and maintain detections across EDR, SIEM, email security, and secure remote access technologies.
• Independently triage and investigate security alerts, incidents, and insider events; coordinate response actions and document findings.
• Conduct threat hunts using threat intelligence and recognized threat frameworks and participate in the incident-response on-call rotation.
• Build and maintain SOAR workflows and security automations using PowerShell and Python.

Skills

EDR & SIEM expertise

Threat hunting

Security automation

Python

PowerShell

Cyber incident response

Communication

APIs & integrations

Education

Bachelor's degree in Computer Science / Information Security or related field

Tools

CrowdStrike

Rapid7

Mimecast

Prisma GlobalProtect

Job description

About Allvue

We are AllvueSystems,the leading provider of software solutions for the Private Capital and Credit markets. Whether a client wants an end-to-end technology suite, or independently focused modules, Allvue helps eliminate the boundaries between systems, information, and people. We’re looking for ambitious, smart, and creative individuals to join our team and help our clients achieve their goals.Working at Allvue Systems means working with pioneers in the fintech industry. Our efforts are powered by innovative thinking and a desire to build adaptable financial software solutions that help our clients achieve even more. With our common goals of growth and innovation, whether you’re collaborating on a cutting-edge project or connecting over shared interests at an office happy hour, the passion is contagious. We wantall of our team members to be open, accessible, curious and always learning. As a team, we take initiative, own outcomes, and have passion for what we do. With these pillars at the center of what we do, we strive for continuous improvement, excellent partnership and exceptional results. Come be a part of the team that’s revolutionizing the alternative investment industry.Define your own future with AllvueSystems!

Job Summary

The Security Operations Engineer III is a senior individual contributor within the Allvue Information Security team responsible for strengthening detection, response, and security automation capabilities. The role combines hands-on management of endpoint detection and response, SIEM and SOAR, email security, and secure remote access technologies. The engineer will develop and tune detections, investigate security and insider events, conduct threat hunting, build automated response workflows, manage integrations and log ingestion, support incident response and the on-call rotation, and assist with the production of operational reporting and metrics.

Responsibilities

Detection, Investigation and Response

• Develop, tune, test, and maintain detections across EDR, SIEM, email security, and secure remote access technologies.
• Independently triage and investigate security alerts, incidents, and insider events; coordinate response actions and document findings.
• Conduct threat hunts using threat intelligence and recognized threat frameworks and participate in the incident-response on-call rotation, and coordinate with the MDR provider (Rapid7) when required.

Security Platform Engineering

• Administer, maintain, and optimise CrowdStrike, Rapid7 SIEM and SOAR, Mimecast, and Prisma GlobalProtect security capabilities
• Manage security-platform integrations and log ingestion, monitor data health, and resolve collection or connectivity issues.
• Evaluate, test and document platform changes, configurations, playbooks, and operational procedures.
• Identify platform and detection gaps and implement improvements that strengthen operational reliability and security coverage

Automation, Reporting and Continuous Improvement

• Build and maintain SOAR workflows and security automations using PowerShell, Python, and APIs.
• Produce operational reporting and metrics covering detection, investigation, response, platform health, and automation outcomes.
• Translate investigation findings, incident lessons, and detection gaps into improvements to security coverage and response processes.
• Apply emerging AI capabilities, including LLM-based tools, where appropriate to improve security or technical workflows while recognizing associated security risks and limitations.

Requirements

• Demonstrated ability to operate independently across security operations, detection engineering, incident response, threat hunting, and security-platform engineering.
• Demonstrated ability to evaluate complex security issues, determine appropriate courses of action, and implement practical solutions.
• Demonstrated ability to collaborate effectively with internal stakeholders and external security service providers.

Technical & System Proficiency

• Advanced hands-on proficiency with EDR and SIEM/SOAR technologies, including CrowdStrike and Rapid7.
• Working-to-advanced proficiency with Mimecast and Prisma GlobalProtect.
• Proficiency in PowerShell and Python for security automation and workflow development.
• Working knowledge of Windows, Linux, and macOS
• Working knowledge of APIs, security integrations, and log-ingestion processes.
• Working knowledge of recognized threat frameworks and their application to detection, investigation, and response.
• Working knowledge of LLMs, agentic AI, broader AI capabilities and limitations, and security risks associated with AI systems.

AI Skills and Experience

• Working knowledge of large language models, agentic AI, and broader AI capabilities and limitations.
• Understanding of how LLMs and AI systems can be exploited or misused from a security perspective.
• A demonstrated track record of using LLMs or other AI capabilities in security or technical workflows.

Experience

• Minimum 5 years of relevant professional experience.
• Demonstrated hands-on experience in security operations, detection engineering, threat hunting, incident response, and security investigation
• Relevant professional security certifications are preferred but not required.

Language Skills

• Ability to communicate technical security information clearly in written and verbal form to technical and non-technical stakeholders.

Education/Certifications

• Bachelor’s degree in computer science, Information Security, Engineering, or a related field preferred, or equivalent relevant work experience.

What We Offer

• Health Coverage optionsalong with other voluntary benefits
• EnterpriseUdemy membership with access tothousandsof personal and professional development courses
• 401Kwith Company match up to 4%or Employee Pension plan
• Competitive pay and year-end bonus potential
• Flexible PTO
• Charitable Donation matching, along with Volunteer and Voting PTO
• Numerousteambuilding activities to promote collaborationin a fun and fast-paced workenvironment

EEOC Statement

AllvueSystems provides equal employment opportunities (EEO) for all employees and applicants for employment. We recognize the real value of bringing people together from diverse backgrounds, experiences and perspectives - we don’t just accept difference, we celebrate and support it. We are committed to advancing these efforts through our strategies to hire, promote, create and support a diverse and inclusive environment throughout our workforce and workplace. It is our policy to prohibit discrimination and harassment of any type without regard to race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, veteran status, or any other status protected under federal, state, or local law. In addition,Allvuewill provide reasonable accommodations for qualified individuals with disabilities.