Security Engineer - SIEM/SOAR - Northeast region

Career Tools

About This Role

GuidePoint Security is seeking a professional to join its Northeast region Security Operations practice. The organization delivers specialized cybersecurity expertise to Fortune 500 companies and United States government entities, helping clients manage risk and optimize their defenses. In this capacity, the incoming specialist will design, implement, and maintain security operations technologies, focusing heavily on security information and event management alongside security orchestration, automation, and response systems. This position involves building…

Job Description

Responsibilities

• Design, build, and support platforms like CrowdStrike, Microsoft Sentinel, Splunk, Elastic, and Google SecOps
• Onboard and tune log sources across cloud environments, identity providers, endpoints, networks, and applications
• Develop, test, and refine detection rules and correlation searches aligned with the MITRE ATT&CK framework
• Construct dashboards, reports, and metrics to support security operations and compliance audits
• Create and maintain automation playbooks for triage, enrichment, containment, and case management
• Integrate security and information technology tools via application programming interfaces
• Maintain version control, testing protocols, and change management procedures for detections and playbooks
• Partner with internal teams and clients to address security questionnaires, audits, and assessments

Requirements

• Three to five years of architecture, implementation, and troubleshooting background involving security information and event management or automation solutions
• Demonstrated capability in formulating log ingestion and aggregation strategies
• Expertise in creating security-focused content for platforms such as Splunk Enterprise Security, CrowdStrike Next-Gen SIEM, Elastic Security, Palo Alto XSIAM, Google SecOps, Microsoft Sentinel, or SentinelOne AI SIEM
• Familiarity with automation platforms including Splunk SOAR, Palo Alto XSOAR, Tines, or Torq
• Deep understanding of client and server operating systems encompassing Windows, Mac, and Linux
• General networking and security troubleshooting proficiency involving firewalls, routing, and network address translation
• Scripting abilities using BASH, Perl, Python, or Java alongside regular expression knowledge

Qualifications

• Background using configuration management and infrastructure tools such as Ansible, Puppet, Chef, Terraform, and SaltStack
• Exposure to alternative security solutions including CrowdStrike, SentinelOne, ZScaler, Palo Alto Networks, Check Point, Microsoft Defender products, Carbon Black, Splunk, and Cisco
• Experience authoring security runbooks, policies, and best practice documentation

Core Skills

Benefits

• Group Medical Insurance options featuring zero deductible preferred provider organization plans or high deductible health plans with health savings account contributions
• Group Dental Insurance coverage
• Twelve corporate holidays and a flexible time off program
• Cellular phone and home internet allowances
• Eligibility for a retirement plan after two months at open enrollment
• Pet benefit option

Frequently Asked Questions

Answers are based only on the employer’s listing; where it doesn’t say, neither do we.

Sample Interview Questions

AI-generated questions tailored to this specific role — a preview of the full practice set.