Security Operations Expert

Fortinet; Sunnyvale (CA); On-site; USD 92,000 - 112,000; Full time

Benefits offered by this job

Equity program

Bonus eligibility

Job summary

Fortinet is seeking a Security Operations Expert to join our SOC in Sunnyvale, CA. You will monitor incidents, perform vulnerability management, and administer Fortinet security tools while refining detection rules and playbooks.

The role emphasizes collaboration with global teams, strong analytical skills, and effective communication for executive audiences. US work authorization is required.

Qualifications

• 5+ years of experience in security operations, incident response, or vulnerability management.
• Hands-on experience administering Fortinet security tools and configuring playbooks in SOAR (Json/Jinja).
• Strong understanding of SIEM/EDR systems and detection engineering.
• Familiarity with security frameworks (NIST, ISO 27001).
• Scripting skills in Python or PowerShell for automation.

Responsibilities

• Monitor and respond to security incidents following incident response protocols.
• Conduct vulnerability assessments and manage remediation efforts.
• Perform log analysis and investigations to identify threats.
• Administer SIEM/EDR tools and SOAR platforms; fine-tune alerting rules.
• Develop reports for technical and non-technical audiences.
• Improve security measures by updating policies and configurations.
• Track emerging threats and TTPs to inform defenses.
• Participate in continuous SOC improvements and integrations.

Skills

Security operations

Incident response

Vulnerability management

Detection engineering

Python

PowerShell

NIST/ISO 27001

Analytical thinking

Communication

Team collaboration

Education

Bachelor’s degree in Computer Science or Cybersecurity

CISSP

GIAC

CEH

Fortinet NSE Certification

Tools

FortiSOAR

FortiSIEM

FortiAnalyzer

Job description

Job Description

Join Fortinet, a cybersecurity pioneer with over two decades of excellence, as we continue to shape the future of cybersecurity and redefine the intersection of networking and security. At Fortinet, our mission is to safeguard people, devices, and data everywhere. We are seeking a dynamic and highly skilled Security Operations Expert to join our SOC team, responsible for the security monitoring and management systems. This role encompasses incident response, vulnerability management, and system administration of critical security tools. The ideal candidate will also fine‑tune detection rules to enhance the effectiveness of incident detection and response workflows.

Key Responsibilities

• Monitor and respond to security incidents in alignment with incident response protocols.
• Conduct vulnerability assessments and manage remediation efforts.
• Perform log analysis, host-based, and network forensic investigations to identify threats.
• Administer and maintain security tools such as SOAR, SIEM, Anti‑Virus, and similar platforms.
• Fine‑tune incident detection and alert‑triggering rules to minimize false positives and improve detection accuracy.
• Analyze and improve security measures by assessing and updating policies, configurations, and procedures.
• Maintain situational awareness by tracking emerging threats, attack patterns, and tactics, techniques, and procedures (TTPs).
• Develop comprehensive reports and presentations for both technical and non‑technical audiences.
• Contribute to the SOC’s continuous improvement by refining workflows, automation, and system integrations.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field (or equivalent experience).
• 5+ years of experience in security operations, incident response, or vulnerability management.
• Hands‑on experience administering and configuring security tools such as FortiSOAR, FortiSIEM, and FortiAnalyzer. Understanding and building playbooks in SOAR in Json/Jinja experience is preferred.
• Strong understanding of detection engineering, fine‑tuning alerting rules, and managing SIEM/EDR systems.
• Proficiency in security frameworks (e.g., NIST, ISO 27001) and compliance standards.
• Familiarity with scripting (e.g., Python, PowerShell) for task automation and tool customization.
• Strong analytical and troubleshooting skills for rapid issue resolution under pressure.
• Excellent communication skills, both written and verbal, for technical and executive audiences.
• Industry certifications such as CISSP, GIAC, CEH, or equivalent are highly preferred.

About Our Team

Join our team, known for its collaborative ethos, working seamlessly with global customers, internal engineering teams and product development groups. Our team culture emphasizes continuous learning, innovation, and a strong commitment to customer satisfaction. We embrace Fortinet’s core values of openness, teamwork and innovation, fostering an environment where team members support each other, share knowledge, and leverage AI to solve complex technical challenges. Our inclusive and dynamic team thrives on collaboration and is driven by the shared goal of maintaining Fortinet’s high standards of excellence in cybersecurity solutions.

Must be authorized to work in the U.S. without sponsorship.

The US base salary range for this full‑time position is $92,000-$112,000.

Wage ranges are based on various factors, including the labour market, job type, and job level. Exact salary offers will be determined by factors such as the candidate's subject knowledge, skill level, qualifications, experience, and geographic location.

All roles are eligible to participate in the Fortinet equity program.

Bonus eligibility is reviewed at the time of hire and annually at the Company’s discretion.

Why Join Us

We encourage candidates from all backgrounds and identities to apply. We offer a supportive work environment and a competitive Total Rewards package to support you with your overall health and financial well‑being.

Embark on a challenging, enjoyable, and rewarding career journey with Fortinet. Join us in bringing solutions that make a meaningful and lasting impact to our 890,000+ customers around the globe.

Why Join Us

We encourage candidates from all backgrounds and identities to apply. We offer a supportive work environment and a competitive Total Rewards package to support you with your overall health and financial well‑being. Embark on a challenging, enjoyable, and rewarding career journey with Fortinet. Join us in bringing solutions that make a meaningful and lasting impact to our 660,000+ customers around the globe.

About Us

Fortinet (NASDAQ: FTNT) secures the largest enterprise, service provider, and government organizations around the world. Fortinet empowers its customers with intelligent, seamless protection across the expanding attack surface and the power to take on ever‑increasing performance requirements of the borderless network - today and into the future. Only the Fortinet Security Fabric architecture can deliver security without compromise to address the most critical security challenges, whether in networked, application, cloud or mobile environments. Fortinet ranks number one in the most security appliances shipped worldwide and more than 500,000 customers trust Fortinet to protect their businesses.

We are committed to providing reasonable accommodations for all qualified individuals with disabilities. If you require assistance or accommodation due to a disability, please contact us at [e-mail].

Fortinet is an equal opportunity employer. We value diversity in our company, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, age, military/veteran status or any other applicable legally protected characteristics in the location in which the candidate is applying.