Senior Security Engineer: AI-Driven SOC & Automation

REPAY; United States; Remote; USD 120,000 - 160,000; Full time

Benefits offered by this job

Healthcare benefits

401(k) match

Employee Stock Purchase Plan

Bonus program

Life Insurance

Disability insurance

Day-one benefits

Job summary

REPAY seeks a Senior Security Engineer to join the Security Operations Center, driving incident response and threat hunting across SIEM, EDR/XDR, and cloud environments.

You will author and maintain runbooks, automate repetitive tasks, and partner with IT, cloud, and app teams to reduce risk while improving detection and response maturity. A hands-on, pressure-tested investigator will thrive here.

Qualifications

• Bachelor’s degree in Computer Science, Information Systems, or related field; equivalent practical experience.
• 4–7+ years in SOC, IR, threat hunting, security engineering, or security operations.
• Hands-on experience with SIEM (Splunk ES) and EDR/XDR platforms.
• Strong knowledge of attacker techniques, MITRE ATT&CK, malware behavior, phishing, identity-based attacks, and cloud abuse patterns.

Responsibilities

• Monitor and triage security events across SIEM, EDR/XDR, identity, email, cloud, and network telemetry; ensure timely disposition.
• Conduct proactive threat hunts across endpoint, network, cloud, identity, and SaaS environments.
• Lead IR activities: triage, investigation, containment, eradication, recovery; develop and test playbooks.
• Support tabletop exercises and purple team activities to validate detection and response readiness.
• Coordinate response actions with IT, cloud engineering, network, and app teams; mentor junior engineers.

Skills

Splunk SIEM

EDR/XDR

MITRE ATT&CK

Cloud (AWS/Azure)

Networking basics

Scripting (Python/PowerShell)

Incident documentation

On-call rotation

Communication skills

Education

Bachelor’s degree in Computer Science / Information Systems

Tools

Terraform

CloudFormation

SASE/SSE

DLP concepts

Job description

REPAY seeks a Senior Security Engineer to join the Security Operations Center, driving incident response and threat hunting across SIEM, EDR/XDR, and cloud environments.

You will author and maintain runbooks, automate repetitive tasks, and partner with IT, cloud, and app teams to reduce risk while improving detection and response maturity. A hands-on, pressure-tested investigator will thrive here.