Senior SOC Detection Engineer — Remote, Equity & PTO

pointdigitalfinance; United States; Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Remote-first US

Unlimited PTO

Company holidays

Parental leave

401(k) plan

Life insurance

Disability coverage

Internet stipend

Home-office stipend

Laptop + monitor

Job summary

pointdigitalfinance is seeking a senior security operations professional to lead detection and response for a regulated consumer-finance environment. You will prototype a modern detection and response practice, engineer detections, automate response, and contribute to an on-call rotation with the security lead in a mostly remote setup.

The role emphasizes hands-on incident response, cloud and SaaS telemetry, and building repeatable security processes at scale in a fast-moving company.

Qualifications

• Hands-on experience in security operations and incident response at a senior IC level.
• Strong SIEM skills with detections, rules, and dashboards.
• Solid grasp of cloud (AWS), identity (Google Workspace), and SaaS telemetry.

Responsibilities

• Triage, investigate, and contain security alerts during on-call rotation.
• Build and maintain incident-response runbooks and escalation paths.
• Engineer and tune SIEM detections, dashboards, and reporting in Coralogix.
• Reduce false positives and onboard new log sources across cloud and endpoint.
• Lead vulnerability management, coordinate remediation, and report risk reduction.
• Develop detection-as-code and SOAR automation; apply AI/LLM tooling.
• Produce security metrics and audit-ready control evidence for leadership.

Skills

Incident response

Security operations

SOC

SIEM tuning

Cloud security (AWS)

Threat detection engineering

On-call rotation

Tools

Coralogix

SOAR

AI/LLM tooling

Google Workspace

Job description

pointdigitalfinance is seeking a senior security operations professional to lead detection and response for a regulated consumer-finance environment. You will prototype a modern detection and response practice, engineer detections, automate response, and contribute to an on-call rotation with the security lead in a mostly remote setup.

The role emphasizes hands-on incident response, cloud and SaaS telemetry, and building repeatable security processes at scale in a fast-moving company.