Siem Soar Security Operations Engineer

Operate SIEM and SOAR capabilities remotely at Alpaca, using detection engineering and response automation to protect growing financial infrastructure.As a Security Operations Engineer, you will own daily security operations and continuous improvement. You will onboard logs, tune detections, investigate alerts, and automate repeatable responses. The role works with Security, IT, DevOps, and Engineering while reporting to the Enterprise Security Architect.Key Responsibilities:
Onboard, parse, normalize, and validate security log sourcesBuild and tune MITRE ATT&CK-aligned detection rulesMaintain actionable alerts, dashboards, and detection coverageDevelop SOAR playbooks for enrichment and containmentSupport incidents, hunts, runbooks, metrics, and on-call operationsRequirements:
Three or more years in Security Operations or detection engineeringHands-on SIEM operation and tuning experienceSOAR playbook or response automation experienceLinux, Python, or Bash experience for security operationsStrong investigation, communication, and cross-functional escalation skillsBring SIEM, SOAR, detection, and incident response expertise to Alpaca’s distributed Security Team.
#J-18808-Ljbffr