Security Platform Engineer: Detections & Automation

Sourcepass; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

Sourcepass is seeking a Security Engineer to design, deploy, and maintain security platforms supporting managed services and client environments. You will own the technical quality and operational health of security tooling across onboarding, migration, steady-state operations, and offboarding.

You will partner with SOC analysts, service delivery teams, vendors, and clients to improve detection coverage, automate repeatable tasks, resolve escalations, and ensure controls remain measurable and

Qualifications

• Design, deploy, configure, and maintain security technologies across endpoint protection, EDR/MDR, SIEM, SOAR, and related integrations.
• Monitor health, licensing, and coverage; investigate gaps and drive issues to resolution.
• Build SIEM detections, alert rules, enrichment logic, and automation workflows.
• Tune alerts to reduce duplicates and improve fidelity.
• Provide advanced escalation support for security tools and deployments.

Responsibilities

• Partner with SOC operations to translate incident and alert trends into engineering improvements.
• Coordinate with clients, internal service teams, and vendors to communicate requirements, implementation plans, risks, dependencies, status, and technical outcomes.
• Participate in implementation reviews, troubleshooting sessions, operational handoffs, and service-improvement initiatives.
• Respond to events and alerts and resolve issues.
• Maintain platform health and coverage across onboarding, migration, steady-state operations, and offboarding.

Skills

Advanced security analytics

Incident response

Communication skills

Problem-solving

Team collaboration

Tools

SIEM

SOAR

EDR/MDR

Vulnerability management

Identity security

Email security

Job description

Sourcepass is seeking a Security Engineer to design, deploy, and maintain security platforms supporting managed services and client environments. You will own the technical quality and operational health of security tooling across onboarding, migration, steady-state operations, and offboarding.

You will partner with SOC analysts, service delivery teams, vendors, and clients to improve detection coverage, automate repeatable tasks, resolve escalations, and ensure controls remain measurable and