Security Operations & Incident Response Engineer - Remote

Pearl Consulting Group.; Northern (KY); Hybrid; USD 110,000 - 170,000; Full time

Job summary

Pearl Consulting Group is seeking an Engineer in Security Operations and Incident Response. The role focuses on maturing the organization's SOC and IR program, with responsibilities spanning digital forensics, playbook development, threat modeling, and detection engineering in hybrid cloud environments.

Ideal candidates bring 5+ years in IR, strong SIEM/SOAR experience, and proficiency in scripting. This position supports remote and hybrid work arrangements across North America.

Qualifications

• Bachelor’s degree with 5+ years in incident response and SOC tooling.

Responsibilities

• Provide expert support for deep‑dive investigations including digital forensics.
• Author IR playbooks and guidelines to keep the team agile.
• Develop threat models and incorporate pen-test findings into detection strategies.
• Design complex detection rules and automated remediation workflows.
• Utilize threat intel and MITRE ATT&CK to identify visibility gaps.
• Maintain docs of detection strategies and incident timelines.
• Tune SIEM rules to maximize detection and minimize alert fatigue.
• Review threat intel and dark web monitoring systems.
• Script and query using Python/PowerShell/Bash/XQL; leverage SOAR.
• Support IR leadership as backup on IR activities.

Skills

Incident response

SOC tooling

Threat modeling

Scripting languages

Python

PowerShell

Bash

XQL

Communication

Hybrid cloud ops

Education

Bachelor’s degree

Tools

Microsoft Sentinel

Cortex XSIAM

XSOAR

Job description

Pearl Consulting Group is seeking an Engineer in Security Operations and Incident Response. The role focuses on maturing the organization's SOC and IR program, with responsibilities spanning digital forensics, playbook development, threat modeling, and detection engineering in hybrid cloud environments.

Ideal candidates bring 5+ years in IR, strong SIEM/SOAR experience, and proficiency in scripting. This position supports remote and hybrid work arrangements across North America.