This is an urgent, full-time hybrid Security Operations Engineer opportunity in Addison, TX with a large organization. You’ll join an established security operations team responsible for protecting a large enterprise environment using CrowdStrike Falcon, Splunk SIEM, and an email security gateway, with a strong focus on incident response, threat hunting, detection, and security engineering.
Required Skills & Experience
- Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or a related field, or equivalent work experience
- 3-5 years of combined IT and cybersecurity experience, including experience within a SOC or security engineering environment
- Hands-on experience with Splunk or a comparable SIEM for alert triage, correlation, investigation, and root cause analysis
- Proven experience supporting major incident response activities
- Experience with EDR detection, investigation, and response, preferably CrowdStrike Falcon
- Strong written communication skills with the ability to translate complex technical findings into clear, concise language for non-technical stakeholders
- Ability and willingness to participate in an on-call rotation, including weekends
Desired Skills & Experience
- Security certification such as CompTIA Security+, CySA+, CEH, or equivalent
- Experience with digital forensics and/or threat hunting
- Scripting experience using Python, PowerShell, or Bash
- Experience developing security detection rules and SOAR playbooks
- Experience working with a Managed Detection and Response (MDR) provider
- Familiarity with the MITRE ATT&CK framework
- Experience with enterprise security operations and incident management processes
What You Will Be Doing Daily Responsibilities
- 65% Hands On: Investigate and correlate suspicious events, determine root cause, support major incident response efforts, perform proactive and reactive threat hunting, and recommend improvements to security controls and procedures
- 35% Team Collaboration: Serve as an escalation point and resource for junior analysts, partner with cross-functional teams, conduct business impact analysis, and participate in incident response exercises and drills
The Offer
- Full-time, hybrid opportunity in Addison, TX
- Opportunity to work with enterprise-scale security technologies including CrowdStrike Falcon and Splunk
- Exposure to global security operations, incident response, threat hunting, and detection engineering
- Opportunity for career growth from SOC operations into a broader security engineering role
- Bonus eligible
You will receive the following benefits:
- Medical, Dental, and Vision Insurance
- Vacation Time
- Stock Options
Applicants must be currently authorized to work in the US on a full-time basis now and in the future.