Security Engineer

The Security Engineer is an intermediate technical individual contributor who investigates and resolves Level 2 and Level 3 SOC escalations, develops and tunes detections, builds approved automation, and contributes to SOC engineering projects. The role applies general knowledge of industry practices, techniques, standards, concepts, and principles to technical problems of moderate scope and complexity. Key Responsibilities Investigate and resolve Level 2 and Level 3 alerts, cases, and incidents using established procedures, playbooks, and escalation paths. Analyze endpoint, identity, email, cloud, network, and application telemetry to validate activity, determine scope, and document findings. Develop, test, deploy, tune, and document detections for defined use cases across SIEM, XDR, EDR, cloud, identity, email, and other telemetry. Develop approved enrichment, triage, notification, containment, and remediation workflows for Tier 1 scenarios that outsourced providers cannot fully address. Perform scoped threat hunts and retrospective searches using documented hypotheses and established analysis methods. Support telemetry onboarding, platform configuration, integrations, and troubleshooting for assigned systems and use cases. Maintain accurate case records, detection documentation, automation runbooks, and technical procedures. Contribute to project milestones and escalate work that exceeds established authority, procedures, or technical scope. Monitor and investigate securit