Senior Cybersecurity Engineer - MSSP Security Lead

Socket.dev; United States; Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

401(k) retirement plan with company

Flexible time off

15 paid holidays

Sick leave

Disability insurance

Life insurance

Paid parental leave

Job summary

Socket.dev is seeking a Senior Cybersecurity Engineer to own platform configuration and health, drive proactive threat detection, and lead incident response for multiple client environments. You will optimize onboarding of log sources, tuning of detections, and remediation coordination with engineering teams.

The role emphasizes deep expertise in endpoint security, SIEM management, and vulnerability handling, with collaboration across MSP-like multi-client contexts and a global NOC-backed

Qualifications

• Hands-on ownership of EDR and SIEM/vulnerability management platforms.
• Experience securing Microsoft identity and endpoint services (Entra ID, Conditional Access, Intune, Defender).
• Cloud security experience in AWS/Azure/GCP with identity, workload and posture management.
• Automation via scripting (Python/PowerShell) and vendor APIs.
• Experience writing root cause analyses and following change management.
• Strong analytical, troubleshooting, and client-facing communication.

Responsibilities

• Administer, configure, and tune core security platforms across multiple client tenants.
• Build and refine detection logic; reduce false positives and create incident response playbooks.
• Onboard and troubleshoot SIEM log sources and API integrations.
• Triage alerts and serve as technical lead during live incidents.
• Run vulnerability scanning, prioritize by exploitability, drive remediation with engineering teams.
• Define controls around AI systems with activity monitoring and testing.
• Automate recurring security operations with scripts and platform APIs.
• Manage relationships with security vendors and ensure delivered value.
• Write root cause analyses and maintain baselines and change documentation.
• Tailor configurations per client and provide executive summaries and guidance.
• Mentor junior engineers and collaborate with infrastructure teams.

Skills

EDR ownership

SIEM expertise

Microsoft Defender

Cloud security

Analytical troubleshooting

Client-facing communication

Education

Bachelor's degree in IT/cybersecurity or equivalent hands-on

Tools

CrowdStrike Falcon

Rapid7 InsightIDR

InsightVM

Microsoft Defender

Microsoft Sentinel

Splunk

Cortex XSOAR

Tenable

Job description

Socket.dev is seeking a Senior Cybersecurity Engineer to own platform configuration and health, drive proactive threat detection, and lead incident response for multiple client environments. You will optimize onboarding of log sources, tuning of detections, and remediation coordination with engineering teams.

The role emphasizes deep expertise in endpoint security, SIEM management, and vulnerability handling, with collaboration across MSP-like multi-client contexts and a global NOC-backed