Senior SIEM/SOAR Engineer - Remote & Automation

GuidePoint Security, LLC; United States; Remote; USD 120,000 - 170,000; Full time

Benefits offered by this job

Remote work primarily

Group Medical Insurance options

Group Dental Insurance

12 corporate holidays and FTO

Mobile phone & home internet allowance

Retirement plan eligibility

Pet Benefit Option

Job summary

GuidePoint Security is seeking a Security Engineer to implement and operate security operations technologies. You will develop telemetry pipelines, SIEM detection content, and security automation while delivering exceptional client service.

The role requires strong troubleshooting and the ability to influence across project scope, effort, and platform performance, with a focus on improving data quality and detection coverage.

Qualifications

• 3-5 years of architecture, implementation and troubleshooting experience with SIEM/SOAR.
• Proficiency developing log ingestion and aggregation strategies.
• Expertise creating security detection logic and dashboards for SIEM platforms.
• Expertise with SOAR platforms and automation development.
• Strong troubleshooting across Windows, Linux and macOS environments.

Responsibilities

• Architect, deploy, and maintain SIEM platforms including data ingestion, parsing, normalization, and retention.
• Onboard and tune log sources across cloud, identity, endpoint, network, and SaaS apps.
• Develop and tune detection rules, correlations, and analytics mapped to MITRE ATT&CK.
• Build dashboards and reports for SOC, leadership, and audit/compliance needs.
• Monitor SIEM health and performance; optimize data ingestion costs.

Skills

SIEM/SOAR

Log ingestion

Detections/Analytics

Scripting (Python)

Windows

Linux/Mac

Tools

Splunk ES

CrowdStrike NG-SIEM

Elastic Security

Palo Alto XSIAM

Microsoft Sentinel

Splunk SOAR

XSOAR

Tines

Torq

Job description

GuidePoint Security is seeking a Security Engineer to implement and operate security operations technologies. You will develop telemetry pipelines, SIEM detection content, and security automation while delivering exceptional client service.

The role requires strong troubleshooting and the ability to influence across project scope, effort, and platform performance, with a focus on improving data quality and detection coverage.