Security Operations Lead - Incident Response & SIEM

Fortinet; Sunnyvale (CA); On-site; USD 92,000 - 112,000; Full time

Benefits offered by this job

Equity program

Bonus eligibility

Job summary

Fortinet is seeking a Security Operations Expert to join our SOC in Sunnyvale, CA. You will monitor incidents, perform vulnerability management, and administer Fortinet security tools while refining detection rules and playbooks.

The role emphasizes collaboration with global teams, strong analytical skills, and effective communication for executive audiences. US work authorization is required.

Qualifications

• 5+ years of experience in security operations, incident response, or vulnerability management.
• Hands-on experience administering Fortinet security tools and configuring playbooks in SOAR (Json/Jinja).
• Strong understanding of SIEM/EDR systems and detection engineering.
• Familiarity with security frameworks (NIST, ISO 27001).
• Scripting skills in Python or PowerShell for automation.

Responsibilities

• Monitor and respond to security incidents following incident response protocols.
• Conduct vulnerability assessments and manage remediation efforts.
• Perform log analysis and investigations to identify threats.
• Administer SIEM/EDR tools and SOAR platforms; fine-tune alerting rules.
• Develop reports for technical and non-technical audiences.
• Improve security measures by updating policies and configurations.
• Track emerging threats and TTPs to inform defenses.
• Participate in continuous SOC improvements and integrations.

Skills

Security operations

Incident response

Vulnerability management

Detection engineering

Python

PowerShell

NIST/ISO 27001

Analytical thinking

Communication

Team collaboration

Education

Bachelor’s degree in Computer Science or Cybersecurity

CISSP

GIAC

CEH

Fortinet NSE Certification

Tools

FortiSOAR

FortiSIEM

FortiAnalyzer

Job description

Fortinet is seeking a Security Operations Expert to join our SOC in Sunnyvale, CA. You will monitor incidents, perform vulnerability management, and administer Fortinet security tools while refining detection rules and playbooks.

The role emphasizes collaboration with global teams, strong analytical skills, and effective communication for executive audiences. US work authorization is required.