Security Operations Manager

The Senior Security Operations Engineer will monitor security events and alerts using security tooling including MSSP, SIEM, AI, and CSPM tools to identify and triage potential threats. Responsibilities include developing, implementing, and maintaining high-fidelity detection rules and alerts within SIEM and other security platforms based on threat intelligence, the MITRE ATT&CK framework, and identified risks. The role involves conducting continuous tuning and optimization of existing detection logic, responding to issues identified by employees, and acting as a security incident response lead. Building, enhancing, and managing security playbooks, conducting security assessments through vulnerability testing and threat hunts, and performing security reviews of corporate properties are also key duties. The engineer will lead security incident response tabletop exercises, evolve and champion the use of Cribl products in the security tech stack, and collaborate with threat intelligence teams to integrate new indicators of compromise into detection strategies.