Senior SOC Security Engineer - SIEM/IR & Automation

Socket.dev; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

11:11 Systems is seeking an experienced Security Engineer to join the Security Operations team. You will support, build, and refine systems powering a global SOC, delivering 24/7 monitoring, support, and escalation for customers.

You’ll act as escalation point for SOC, review high-severity incidents, and participate in on-call rotation. Strong security engineering background, telecom/enterprise incident experience, and proactive continuous improvement mindset are required.

Qualifications

• 5+ years in information security, including 3+ years in information technology.
• 3+ years' experience with SIEM, EDR, SOAR, and/or vulnerability scanning tools (focus on Azure Sentinel, Cortex XDR, and Tenable).
• Analyst-level experience in the telecom and/or enterprise cybersecurity industry.
• 1+ years' experience with Python scripting or development.
• 1+ years' experience with Linux administration and troubleshooting.

Responsibilities

• Support SOC Management in setting tactical and operational goals, and in developing policies and procedures for timely detection, assessment, reporting, and response to security events.
• Develop and fine-tune detection rules, correlation logic, and automation workflows across SIEM and SOAR platforms.
• Serve as customer-facing escalation support for issues and security incidents escalated from Tier 1 and Tier 2 SOC Analysts.
• Provide 'first responder' incident response advisory support for clients, within the scope of 11:11 Systems' software and systems.
• Own the timeliness and accuracy of critical incident identification, advisement, and reporting, both internally and to customers.
• Lead and support process improvement initiatives to advance operational objectives, drive efficiencies, and improve KPIs.

Skills

SIEM

EDR

SOAR

Vulnerability scanning

Python scripting

Linux administration

Networking

Incident response

KQL

Palo Alto Cortex XDR

ThreatX

Kubernetes

Azure Sentinel

Tools

Azure Sentinel

Cortex XDR

Tenable

KQL

Palo Alto Panorama

ThreatX

Kubernetes

Job description

11:11 Systems is seeking an experienced Security Engineer to join the Security Operations team. You will support, build, and refine systems powering a global SOC, delivering 24/7 monitoring, support, and escalation for customers.

You’ll act as escalation point for SOC, review high-severity incidents, and participate in on-call rotation. Strong security engineering background, telecom/enterprise incident experience, and proactive continuous improvement mindset are required.