Senior Security Engineer

Akkodis; Charlotte (NC); On-site; USD 90,000 - 101,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Life Insurance

401K

Job summary

Akkodis is seeking a Sr. Security Operations Engineer for our client in Charlotte, NC. This onsite role leads complex security investigations, monitors enterprise and cloud environments, and matures security operations capabilities with SIEM/EDR expertise.

You will hands-on detect, respond, and automate using Microsoft Sentinel, Defender suites, QL, and related tooling. Strong communication and collaboration across IT, security, and business teams are essential.

Qualifications

• 5+ years in security operations or related field.
• Proven ability to lead complex investigations.
• Hands-on with modern SIEM/EDR, especially Microsoft Sentinel/Defender.
• Proficiency in KQL for detection and hunting.
• Experience with identity, endpoint, cloud security events.
• Knowledge of Microsoft Entra ID, Azure, and AWS security services.
• Experience with incident management tools (PagerDuty, Jira, Freshservice).
• Strong scripting skills (PowerShell, Python).
• Excellent written and verbal communication; able to explain tech to non-tech.
• Willingness to onsite in Charlotte, NC and participate in on-call.

Responsibilities

• Lead complex security investigations from alert to containment and recovery.
• Serve as senior escalation point for alerts across endpoints, identity, cloud, and network.
• Coordinate with MDR/MXDR providers for monitoring and handoff.
• Develop and maintain detection rules, dashboards, and automation workflows (KQL).
• Build SOAR playbooks and integration workflows.
• Conduct proactive threat hunting using threat intel and telemetry.
• Administer Microsoft security technologies (Sentinel, Defender suites).
• Collaborate with IT, IAM, Cloud Eng, DevSecOps, and legal/security stakeholders.
• Prepare incident reports and post-incident reviews.

Skills

Incident response leadership

Security operations

Threat hunting

KQL

PowerShell

Python

Cloud security (Azure/AWS)

Communication skills

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field

Tools

Microsoft Sentinel

Microsoft Defender

Defender for Endpoint

Defender for Office 365

Entra ID

PagerDuty

Jira

Freshservice

Teams

Confluence

Zscaler

Wiz

Job description

Akkodis is seeking a Sr. Security Operations Engineer for one of our clients in Charlotte, NC.

Rate Range: $65.00 to $73.00/hour; the rate may be negotiable based on experience, education, geographic location, and other factors.

The Senior Security Operations Engineer is a hands-on technical leader responsible for protecting personnel, enterprise systems, cloud environments, applications, engineering platforms, and business operations. This position serves as a senior escalation resource for security monitoring and incident response while helping mature security operations capabilities, processes, and technologies.

The ideal candidate combines deep technical expertise with strong communication skills, investigative rigor, and a proactive approach to improving threat detection, response, automation, and operational effectiveness.

This role is onsite daily.

Key Responsibilities

• Lead complex security investigations from initial alert validation through containment, eradication, recovery, documentation, and lessons learned.
• Serve as a senior escalation point for security alerts across endpoint, identity, email, cloud, SaaS, and network environments.
• Partner with managed detection and response providers to ensure effective monitoring, triage, escalation, documentation, and incident handoff.
• Participate in an on-call rotation and respond to critical security incidents outside normal business hours as needed.
• Develop, tune, test, and maintain detection rules, threat-hunting queries, dashboards, watchlists, automation workflows, and investigation content using Kusto Query Language (KQL).
• Build and enhance security orchestration and automation processes that improve investigation efficiency and accelerate response activities.
• Conduct proactive threat hunting using threat intelligence, indicators of compromise, attacker behaviors, and security telemetry.
• Administer and optimize Microsoft security technologies, including Microsoft Sentinel, Microsoft Defender XDR, Defender for Endpoint, Defender for Office 365, Defender for Identity, and Microsoft Entra ID security capabilities.
• Investigate and coordinate response activities across security tools such as Zscaler, Abnormal Security, Wiz, PagerDuty, Jira, Freshservice, and related security platforms.
• Create and maintain incident response playbooks, investigation procedures, escalation processes, and operational documentation.
• Collect, preserve, and analyze digital evidence while supporting endpoint and cloud forensic investigations.
• Collaborate with IT Operations, IAM, Cloud Engineering, DevSecOps, GRC, Legal, Privacy, HR, Physical Security, Communications, and business stakeholders during incidents and security initiatives.
• Support vulnerability and zero-day response efforts by assessing exposure, coordinating remediation, tracking risk, and communicating status updates.
• Correlate exposure and cloud security findings with asset context, active threats, and business impact to drive remediation priorities.
• Prepare incident reports, executive summaries, operational metrics, and post-incident reviews for technical and leadership audiences.
• Mentor analysts and team members while promoting best practices and technical excellence across security operations.
• Continuously improve detections, controls, playbooks, automation, logging, and response readiness based on lessons learned.
• Participate in tabletop exercises, purple-team engagements, detection validation, and other security readiness activities.

Required Qualifications

• 5+ years of experience in security operations, incident response, threat detection, digital forensics, security engineering, or a related discipline.
• Proven ability to lead complex technical investigations and make effective decisions in dynamic environments.
• Hands-on experience with modern SIEM and EDR/XDR platforms, with strong expertise in Microsoft Sentinel and Microsoft Defender preferred.
• Proficiency with KQL or comparable query languages for detection engineering, threat hunting, log analysis, and dashboard development.
• Experience investigating identity, endpoint, email, cloud, SaaS, and network security events, including phishing, account compromise, malware, ransomware, insider threats, data loss, and third-party risks.
• Working knowledge of Microsoft Entra ID, Microsoft 365 security, Azure, and AWS security services.
• Experience with incident and case management platforms such as PagerDuty, Jira, Freshservice, Teams, and Confluence.
• Understanding of security automation, orchestration, APIs, scripting, and workflow development.
• Experience with PowerShell, Python, JSON, Logic Apps, or similar automation technologies.
• Knowledge of vulnerability management, security exposure management, cloud security posture management, and risk-based remediation.
• Familiarity with forensic investigation processes, evidence preservation, timeline analysis, and investigative reporting.
• Strong written and verbal communication skills with the ability to explain technical findings to both technical and non-technical audiences.
• Strong documentation practices, attention to detail, and commitment to repeatable and auditable processes.
• Ability to work onsite in Charlotte, NC and participate in an on-call rotation that includes evenings, weekends, and holidays.
• Experience implementing agentic or AI-driven capabilities within a Security Operations Center (SOC).

Preferred Qualifications

• Experience supporting security operations within high-growth, manufacturing, engineering, automotive, or technology environments.
• Experience working with MDR, MXDR, MSSP, or managed security service providers.
• Hands-on experience with Zscaler, Abnormal Security, Wiz, cloud workload protection, DLP, threat intelligence, or malware analysis platforms.
• Experience designing and optimizing SOAR playbooks, Logic Apps, API integrations, and AI-assisted investigation workflows.
• Experience supporting tabletop exercises, major incident response, crisis management activities, and post-incident improvement programs.
• Relevant certifications such as CISSP, GCIH, GCIA, GCFA, GNFA, SC-200, AZ-500, Security+, or equivalent demonstrated expertise.

Education

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field.

Equal Opportunity Employer/Veterans/Disabled

Our benefit offerings provide employees the flexibility to choose the type of coverage that meets their individual needs.

• medical
• dental
• vision
• life insurance
• short-term disability
• additional voluntary benefits
• EAP program
• commuter benefits
• a 401K plan

• Paid Sick Leave
• any other paid leave required by Federal, State, or local law
• Holiday pay where applicable

To read our Candidate Privacy Information Statement, which explains how we will use your information, please visit:

https://www.modis.com/en-us/candidate-privacy/

The Company will consider qualified applicants with arrest and conviction records in accordance with federal, state, and local laws and/or security clearance requirements, including, as applicable:

The California Fair Chance Act

Los Angeles City Fair Chance Ordinance

Los Angeles County Fair Chance Ordinance for Employers