Senior Security Engineer - SOC

<h1><strong><span style="font-size:18px;">Senior Security Engineer (L3 SOC)</span></strong></h1><h2><span style="font-size:18px;">Role Summary</span></h2><p><span style="font-size:12px;">The Senior Security Engineer (L3) serves as the highest technical escalation point for customer-facing security operations. The role is responsible for advanced threat investigation, incident response, threat hunting, security engineering, detection engineering, and continuous security improvement initiatives.</span></p><p><span style="font-size:12px;">Unlike traditional SOC analyst roles, this position focuses on complex investigations, customer consultation, security use case development, and improving the overall effectiveness of security monitoring platforms. </span></p><h2><span style="font-size:18px;">Key Responsibilities</span></h2><h3><span style="font-size:18px;">Security Operations</span></h3><ul><li><span style="font-size:12px;">Perform advanced investigation and validation of security incidents escalated from L1/L2 teams.</span></li><li><span style="font-size:12px;">Lead root cause analysis (RCA) for major security incidents.</span></li><li><span style="font-size:12px;">Provide recommendations and remediation guidance to customers.</span></li><li><span style="font-size:12px;">Support incident coordination during high-severity security events.</span></li></ul><h3><span style="font-size:18px;">Threat Hunting</span></h3><ul><li><span style="font-size:12px;">Conduct proactive threat hunting activities.</span></li><li><span style="font-size:12px;">Research emerging threats, attack techniques, and adversary TTPs.</span></li><li><span style="font-size:12px;">Develop hunting queries and methodologies using MITRE ATT&CK framework.</span></li></ul><h3><span style="font-size:18px;">Detection Engineering</span></h3><ul><li><span style="font-size:12px;">Design and develop SIEM detection rules and analytics.</span></li><li><span style="font-size:12px;">Improve alert quality through tuning and optimization.</span></li><li><span style="font-size:12px;">Create use cases, correlation rules, watchlists, and detection content.</span></li><li><span style="font-size:12px;">Validate data source coverage and logging requirements. </span></li></ul><h3><span style="font-size:18px;">Security Platform Engineering</span></h3><ul><li><span style="font-size:12px;">Support deployment and optimization of Microsoft Sentinel and related security technologies.</span></li><li><span style="font-size:12px;">Assist with onboarding new log sources and integrations.</span></li><li><span style="font-size:12px;">Develop automation and response playbooks.</span></li><li><span style="font-size:12px;">Perform log analysis and data normalization activities. </span></li></ul><h3><span style="font-size:18px;">Customer Engagement</span></h3><ul><li><span style="font-size:12px;">Participate in customer security reviews and technical workshops.</span></li><li><span style="font-size:12px;">Present investigation findings and technical recommendations.</span></li><li><span style="font-size:12px;">Act as trusted advisor for security monitoring improvements.</span></li><li><span style="font-size:12px;">Support onboarding of new customers and services.</span></li></ul><h3><span style="font-size:18px;">Knowledge & Quality Management</span></h3><ul><li><span style="font-size:12px;">Review investigation quality and SOC processes.</span></li><li><span style="font-size:12px;">Mentor junior analysts and engineers.</span></li><li><span style="font-size:12px;">Develop SOPs, playbooks, and technical documentation.</span></li><li><span style="font-size:12px;">Share security knowledge across SOC teams.</span></li></ul><h2><span style="font-size:18px;">Required Technical Skills</span></h2><h3><span style="font-size:18px;">Security Operations</span></h3><ul><li><span style="font-size:12px;">Incident Response</span></li><li><span style="font-size:12px;">Digital Forensics fundamentals</span></li><li><span style="font-size:12px;">Malware Analysis fundamentals</span></li><li><span style="font-size:12px;">Threat Hunting</span></li><li><span style="font-size:12px;">Security Monitoring</span></li></ul><h3><span style="font-size:18px;">SIEM/XDR Platforms</span></h3><ul><li><span style="font-size:12px;">Microsoft Sentinel</span></li><li><span style="font-size:12px;">Microsoft Defender XDR</span></li><li><span style="font-size:12px;">Microsoft Defender for Endpoint</span></li><li><span style="font-size:12px;">KQL (Kusto Query Language)</span></li></ul><h3><span style="font-size:18px;">Infrastructure Knowledge</span></h3><ul><li><span style="font-size:12px;">Windows Security</span></li><li><span style="font-size:12px;">Linux Security</span></li><li><span style="font-size:12px;">Active Directory</span></li><li><span style="font-size:12px;">Azure / Cloud Security</span></li><li><span style="font-size:12px;">Networking Fundamentals</span></li></ul><h3><span style="font-size:18px;">Detection Engineering</span></h3><ul><li><span style="font-size:12px;">MITRE ATT&CK</span></li><li><span style="font-size:12px;">Rule Development</span></li><li><span style="font-size:12px;">Use Case Development</span></li><li><span style="font-size:12px;">Log Analysis</span></li><li><span style="font-size:12px;">Threat Intelligence Integration</span></li></ul><hr /><h2><span style="font-size:18px;">Preferred Certifications</span></h2><ul><li><span style="font-size:12px;">SC-200</span></li><li><span style="font-size:12px;">AZ-500</span></li><li><span style="font-size:12px;">SC-100</span></li><li><span style="font-size:12px;">GCIA / GCIH</span></li></ul><hr /><h2><span style="font-size:18px;">Experience</span></h2><p></p><ul><li><span style="font-size:12px;">5+ years in Security Operations.</span></li><li><span style="font-size:12px;">2+ years in SIEM engineering or threat hunting.</span></li><li><span style="font-size:12px;">Proven experience with large enterprise security environments.</span></li><li><span style="font-size:12px;">Experience in customer-facing consulting and incident response activities.</span></li></ul>