Security Operations Engineer – Incident Response & Detection

Vertex, Inc.; King of Prussia (PA); On-site; USD 91,000 - 119,000; Full time

Job summary

Vertex, Inc. is seeking a Security Operations Engineer to strengthen security monitoring, incident response, detection engineering, and SecOps automation. This role requires hands-on security work and participates in a rotating shift due to 24/7 coverage, including nights, weekends, and extended hours.

The role emphasizes end-to-end incident response, detection tuning across SIEM/EDR, and proactive threat hunting, with collaboration across teams to improve telemetry and security outcomes.

Qualifications

• Hands-on knowledge in security operations, incident response, detection engineering, or threat hunting and ability to lead investigations.
• Knowledge of attacker tactics across endpoint, identity, network, cloud, and email environments with MITRE ATT&CK mapping.
• Experience with SIEM and EDR/XDR platforms and scripting/automation for SecOps workflows.

Responsibilities

• Monitor, triage, investigate, and respond to security alerts across multiple environments.
• Lead end-to-end incident response from detection to containment and recovery.
• Develop and tune detection logic across SIEM/EDR, and build SecOps tooling and workflows.
• Apply AI responsibly in SecOps and validate AI-assisted outputs.
• Collaborate cross-functionally to close telemetry gaps and improve security.

Skills

Incident response

Threat hunting

MITRE ATT&CK

KQL/SPL/Sigma

Python scripting

Cloud platforms

Communication skills

Education

Bachelor's degree in Cybersecurity/Information Assurance/CS

Tools

SIEM platforms (Sentinel, Splunk, Chronicle, QRadar, Elastic)

EDR/XDR platforms (Defender for Endpoint, CrowdStrike, SentinelOne, Cortex XDR, Carbon Black)

Git-based tooling / CI/CD workflows

Job description

Vertex, Inc. is seeking a Security Operations Engineer to strengthen security monitoring, incident response, detection engineering, and SecOps automation. This role requires hands-on security work and participates in a rotating shift due to 24/7 coverage, including nights, weekends, and extended hours.

The role emphasizes end-to-end incident response, detection tuning across SIEM/EDR, and proactive threat hunting, with collaboration across teams to improve telemetry and security outcomes.