Senior SOC Engineer - EDR & Detection Platform Lead

Sandisk; Milpitas (CA); On-site; USD 140,000 - 210,000; Full time

Job summary

Sandisk is seeking a highly experienced Senior Security Engineer to own, design, and continuously improve the security tooling ecosystem that underpins a modern, detection-first SOC. This hands-on role focuses on reliability, effectiveness, and evolution of SOC platforms and requires bridging engineering with operations.

You will act as the L3/L4 technical authority for security platforms, owning EDR health, detection engineering enablement, and threat assessment while collaborating with SOC

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or equivalent practical experience.
• 5–10+ years of experience in security engineering, detection engineering, or advanced SOC roles.
• Experience supporting SOC operations through engineering and platform ownership.

Responsibilities

• Engineer, deploy, and maintain core SOC platforms (EDR/XDR, sandboxing, Windows investigation VMs, email security).
• Own EDR platform engineering, hygiene, and health across the enterprise.
• Define telemetry, validation, and testing pipelines for detections and response actions.
• Develop malware detonation and analysis environments for safe investigations.
• Automate SOC operations, health checks, deployments, and reporting.
• Document architectures, standards, and guardrails for SOC platforms.

Skills

EDR/XDR

Windows internals

Linux admin

PowerShell

Python

MITRE ATT&CK

SOC platforms

Education

Bachelor’s degree in Cybersecurity

Tools

CrowdStrike

Microsoft Defender

SentinelOne

Job description

Sandisk is seeking a highly experienced Senior Security Engineer to own, design, and continuously improve the security tooling ecosystem that underpins a modern, detection-first SOC. This hands-on role focuses on reliability, effectiveness, and evolution of SOC platforms and requires bridging engineering with operations.

You will act as the L3/L4 technical authority for security platforms, owning EDR health, detection engineering enablement, and threat assessment while collaborating with SOC