Security Engineer – SIEM/SOAR

🔥 16 hours ago

🇺🇸 United States – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

GuidePoint Security

WebsiteLinkedInAll Job Openings

201 - 500 employees

💼 Consulting

🏥 Healthcare

📦 Logistics

Consulting • Healthcare • Logistics

GuidePoint Security is a cybersecurity firm offering consulting, engineering, and managed services to help organizations secure their digital assets. The company specializes in application security, cloud security, data protection, email security, threat intelligence, and identity and access management. With solutions tailored to various platforms including AWS, Microsoft, Google Cloud, and OT environments, GuidePoint Security aims to enhance cybersecurity resilience for both enterprise and government clients. They focus on integrating advanced security technologies and providing expertise in risk assessment, compliance, and security awareness education, helping clients navigate complex cybersecurity challenges and improve their security posture.

📋 Description

• Architect, deploy, and maintain SIEM platforms including CrowdStrike, Microsoft Sentinel, Splunk, Elastic, and Google SecOps • Onboard and tune cloud, identity, endpoint, network, email security, SaaS, and line-of-business application log sources • Develop, test, and tune MITRE ATT&CK-mapped detection rules, correlation searches, and analytics • Build dashboards, reports, and metrics for SOC operations, leadership, and audit/compliance needs • Monitor SIEM health, data quality, ingestion costs, and performance and recommend optimizations • Design, build, and maintain SOAR playbooks for triage, enrichment, containment, and case management • Integrate security and IT tools via APIs, including EDR, identity, ticketing, threat intelligence, email gateways, and vulnerability scanners • Automate phishing response, account compromise, malware triage, and user-behavior alert workflows • Establish version control, testing, and change-management practices for detections and playbooks • Measure and report automation impact, including mean time to detect/respond and analyst hours saved • Partner with SOC analysts, incident responders, threat hunters, and threat intelligence teams • Work with IT, cloud, and application teams on logging and onboarding standards • Support client-facing security questionnaires, audits, and assessments with evidence and documentation • Maintain runbooks, data source inventories, detection catalogs, and architecture diagrams • Participate in on-call or after-hours support rotations for critical platform issues and major incidents as needed • Provide technical troubleshooting, analytical support, client communication, and client-focused service

🎯 Requirements

• 3-5 years of architecture, implementation, and troubleshooting experience with one or more SIEM/SOAR solutions • Proficiency developing log ingestion and aggregation strategies • Expertise developing security-focused content for one or more SIEM platforms, including complex threat detection logic and operational dashboards • Expertise with SOAR platforms such as Splunk SOAR, Palo Alto XSOAR, Tines, and Torq • Familiarity with key security events on common IT platforms • Deep proficiency in Windows, Mac, and Linux operating systems • General networking and security troubleshooting, including firewalls, routing, and NAT • Scripting and development skills in BASH, Perl, Python, or Java • Strong knowledge of regular expressions • Ability to autonomously prioritize and successfully deliver across a portfolio of projects • Willingness to embrace emerging technologies, including AI tools • Sedentary work capability • Substantial movement of wrists, hands, and/or fingers for a minimum of 8 hours a day • Close visual acuity for computer terminal viewing and/or extensive reading for a minimum of 8 hours a day • U.S.-based work authorization/location requirement

🏖️ Benefits

• Remote workforce primarily (U.S. based only) • Group Medical Insurance options: Zero Deductible PPO Plan with GuidePoint paying 90% of the employee premium and 70% of family premiums, or High Deductible Health Plan with HSA with GuidePoint paying 100% of the employee premium and 75% of family premiums • HSA contributions of $850 annually per employee or $1,750 annually per family plan • Group Dental Insurance with GuidePoint paying 100% of the employee premium and 75% of family premiums • 12 corporate holidays • Flexible Time Off (FTO) program • Healthy mobile phone and home internet allowance • Eligibility for retirement plan after 2 months at open enrollment • Pet Benefit Option • Mentorship and guidance opportunities • Up to 10% travel may be required