Senior Security Engineer — Hybrid, Lead Cyber Defense & IR

Socket.dev; Merrill (WI); Hybrid; USD 140,000 - 180,000; Full time

Job summary

Socket.dev is seeking a Senior Security Engineer to lead major security initiatives and provide technical leadership across identity, endpoint, network, and cloud domains. The role requires hands-on expertise and mentoring of engineers on advanced investigations, detection, and incident response.

Responsibilities include initiating triage strategies, defining vulnerability processes, and driving enterprise security architecture improvements across the organization.

Qualifications

• Proven leadership in detection engineering, IR, automation, or architecture.
• Ability to design and maintain enterprise detection logic and automation workflows.
• Advanced experience with security tooling including EDR, DLP, SIEM, identity security, VM and NDR.

Responsibilities

• Investigate and report complex cyber incidents, setting standards for incident response.
• Oversee cybersecurity operations and guide escalation protocols.
• Lead initial cyber incident triage strategies and determine scope and urgency.
• Set standards for vulnerability identification and documentation using advanced tools.
• Direct data analysis using security telemetry and mentor others in analysis.
• Lead root cause analyses for major incidents and influence investigative methodologies across the org.
• Stay at the forefront of threats and drive process improvements and knowledge sharing.
• Architect and optimize the security technology stack and drive strategic improvements.

Skills

Detection engineering

Incident response

Automation workflows

Enterprise architecture

EDR

DLP

SIEM

Identity security

VM

NDR

Cross-domain expertise

Education

CS/IS/Cybersecurity degree

Tools

EDR

SIEM

Job description

Socket.dev is seeking a Senior Security Engineer to lead major security initiatives and provide technical leadership across identity, endpoint, network, and cloud domains. The role requires hands-on expertise and mentoring of engineers on advanced investigations, detection, and incident response.

Responsibilities include initiating triage strategies, defining vulnerability processes, and driving enterprise security architecture improvements across the organization.