Senior SecOps Engineer: Threat Hunting & Automation

Allvue Systems; New York (NY); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health Coverage options

Udemy membership

401K with company match

Flexible PTO

Job summary

Allvue Systems is seeking a Security Operations Engineer III to join the Information Security team. This senior individual contributor role strengthens detection, response, and automation across EDR, SIEM/SOAR, email security, and secure remote access.

You will develop detections, investigate incidents, hunt threats, build automated workflows, manage integrations, support on-call rotation, and produce operational metrics while applying AI capabilities where appropriate to improve security.

Qualifications

• Minimum 5 years in security operations and related fields.
• Demonstrated ability to operate across detection engineering, incident response, threat hunting, and security-platform engineering.
• Strong collaboration with internal stakeholders and external security providers.

Responsibilities

• Develop, tune, test, and maintain detections across EDR, SIEM, email security, and secure remote access.
• Independently triage and investigate security alerts, incidents, and insider events; coordinate response actions.
• Conduct threat hunts using threat intelligence and participate in on-call rotation with MDR coordination.
• Build and maintain SOAR workflows and security automations; produce operational reporting and metrics.

Skills

EDR/SIEM expertise

Threat hunting

Incident response

Security automation

Python

PowerShell

Cross-platform

Education

Bachelor’s degree in Computer Science or related

Tools

CrowdStrike

Rapid7 SIEM/SOAR

Mimecast

Prisma GlobalProtect

Job description

Allvue Systems is seeking a Security Operations Engineer III to join the Information Security team. This senior individual contributor role strengthens detection, response, and automation across EDR, SIEM/SOAR, email security, and secure remote access.

You will develop detections, investigate incidents, hunt threats, build automated workflows, manage integrations, support on-call rotation, and produce operational metrics while applying AI capabilities where appropriate to improve security.