L2 SOC Security Engineer (SIEM / SOAR / UEBA) 3 to 4 Years
Summary
A security engineer maintains and improves SIEM, SOAR, and UEBA platforms, onboards data sources, tunes detections, and investigates incidents for a 24/7 SOC.
- Deploy, configure, administer, and optimize SIEM, SOAR, and UEBA platforms.
- Onboard log sources, security tools, identity sources, and business applications into the security ecosystem.
- Develop and maintain correlation rules, behavioral analytics, dashboards, reports, automation playbooks, and custom integrations.
- Investigate complex security incidents, perform threat hunting, and conduct root cause analysis.
- Develop and optimize parsers, connectors, APIs, and automation workflows to improve SOC efficiency.
- Fine-tune detection rules, behavioral models, and risk scoring to minimize false positives.
- Ensure platform availability, performance optimization, upgrades, backup, and overall system health.
- Support compliance, audit requirements, use case development, documentation, and provide technical guidance to L1 analysts.