Senior Security Operations Engineer

Cieloprojects; New York (NY); On-site; USD 120,000 - 190,000; Full time

Job summary

Cieloprojects is seeking a Senior Security Operations Engineer to act as the technical anchor for 24/7 SOC operations. You will lead detection and response across SentinelOne-integrated SIEM, PKI lifecycle management, and blockchain-intelligence integrations, while collaborating with platform reliability for Sev-1 events and mentoring on-shift engineers.

The role requires 5+ years in security operations with hands-on SIEM/EDR and PKI experience, plus familiarity with Chainalysis, TRM Labs,

Qualifications

• 5+ years in security operations or engineering, including SOC shift experience.
• Hands-on experience with SIEM/EDR platforms (SentinelOne or equivalent) and PKI operations.
• Familiarity with blockchain-intelligence tooling (Chainalysis, TRM Labs, Elliptic or equivalent).
• Relevant security certification (e.g. GIAC, CISSP track) preferred.

Responsibilities

• Lead security monitoring, detection and triage during the shift across SentinelOne and the Fusion Firewall.
• Own day-to-day operation of the PKI certificate lifecycle.
• Operate and tune blockchain-intelligence provider integrations per TCH's election (Chainalysis, TRM Labs or Elliptic).
• Join joint bridges with Platform Reliability for combined security-and-availability Severity 1 events.
• Mentor Security Operations Engineers on-shift.

Skills

SOC shift experience

SIEM/EDR familiarity

PKI operations

Blockchain intelligence tooling

Mentorship

Tools

SentinelOne

Fusion Firewall

Chainalysis

TRM Labs

Elliptic

Job description

Senior Security Operations Engineer

The senior technical anchor of the 24/7 SOC: leads detection and response on-shift across the SentinelOne-integrated SIEM, the TCH-governed PKI certificate lifecycle, the Fusion Firewall threat-intelligence feed, and the blockchain-intelligence provider integrations (Chainalysis, TRM Labs, Elliptic).

Key responsibilities

• Lead security monitoring, detection and triage during the shift across SentinelOne and the Fusion Firewall.
• Own day-to-day operation of the TCH-governed PKI certificate lifecycle.
• Operate and tune the blockchain-intelligence provider integrations per TCH's election (Chainalysis, TRM Labs or Elliptic).
• Join joint bridges with Platform Reliability for combined security-and-availability Severity 1 events.
• Mentor Security Operations Engineers on-shift.

Required experience & qualifications

• 5+ years in security operations or engineering, including SOC shift experience.
• Hands-on experience with SIEM/EDR platforms (SentinelOne or equivalent) and PKI operations.
• Familiarity with blockchain-intelligence tooling (Chainalysis, TRM Labs, Elliptic or equivalent).
• Relevant security certification (e.g. GIAC, CISSP track) preferred.

Success measures

• Mean time to detect and respond, including joint Sev-1 events.
• Certificate lifecycle incident rate (expiries, revocation failures).
• Shift-coverage adherence.

All your information will be kept confidential according to EEO guidelines.