{"id":1964526,"url":"https://alion.io/job/mastery-security-operations-engineer","title":"Security Operations Engineer","company":{"id":2393359,"name":"Mastery","domain":"mastery.net","url":"https://alion.io/company/mastery-net","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Rippling","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Lake Forest, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":81000,"max_usd":156000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":460},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Azure AKS","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false},{"name":"Kubernetes","optional":true},{"name":"SOC 2","optional":true}],"status":"live","first_seen_at":"2026-10-01T18:00:33Z","employer_posted_date":"2026-10-01","last_verified_at":"2026-10-22T15:26:49Z","board_verified":true,"closed_at":null,"days_open":21,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":21},"description":"ABOUT THE ROLE\n\"You'll build the detections that catch what alerts alone would miss, and the automation that keeps a lean team ahead of the threats.\"\nAs a Security Operations Engineer on Mastery's Information Security team, you'll own detection engineering and SOAR automation for MasterMind, our Azure-native transportation management platform. You'll design and tune the analytics rules running in Microsoft Sentinel, build automated response workflows that cut manual triage time, and close visibility gaps across our AKS, endpoint, and network telemetry as we bring new log sources online.\nThis role is ideal for a deeply technical engineer who wants to build and ship detections and automation - not manage people or run the team's day-to-day. If you'd rather spend the day in KQL and automation workflows than in a status meeting, this is built for you.\nWHAT YOU'LL OWN\nDetection Engineering\nBuild real detections: design, write, and tune analytics rules and correlation logic in Microsoft Sentinel, aligned to MITRE ATT&CK.\nClose the gaps: identify and close visibility blind spots across our infrastructure and telemetry as new log sources come online.\nReduce the noise: continuously validate and refine detections to cut false positives without losing real signal.\nAutomation & Response\nAutomate the busywork: design and build SOAR playbooks and workflows that automate triage, enrichment, and response, freeing the analyst team to focus on real investigations.\nIntegrate the stack: build and maintain integrations across Sentinel, Defender, and other security tooling via APIs and scripting.\nTechnical Depth & Threat Context\nTranslate intel into detections: turn emerging threats and adversary TTPs into actionable, tuned detection logic.\nStay hands-on: keep pace with evolving attacker techniques and Sentinel/SOAR platform capabilities through direct, ongoing technical work.\nWHAT YOU BRING\nExperience\n4+ years in security operations, detection engineering, or a closely related technical security role.\nDemonstrated, hands-on experience building or substantially tuning detection rules and correlation logic in a SIEM (Sentinel strongly preferred).\nExperience building SOAR playbooks or comparable security automation workflows.\nSkills & Approach\nDeep query language fluency: comfortable writing and debugging complex KQL (or equivalent SIEM query language) without hand-holding.\nScripting and API proficiency: Python or PowerShell for automation, with experience integrating tools via REST APIs.\nSelf-directed technical focus: prefers to own and ship technical work independently over managing people or processes.\nNice to Have\nExperience in an Azure/AKS or other Kubernetes-based cloud environment.\nExperience supporting SOC 2 or similar compliance audits from a technical evidence standpoint.\nFamiliarity with Sentinel Logic Apps or another SOAR automation platform.\nHOW YOU'LL KNOW YOU'RE SUCCEEDING\nDetection coverage measurably improves: new log sources come online with real, tuned detections behind them, not just raw ingestion.\nFalse positive rates drop: the analyst team trusts what fires in the queue instead of triaging noise.\nManual triage time shrinks: SOAR playbooks handle the repeatable work so the team's time goes to real investigations.\nABOUT MASTERY\nMost TMS platforms are tolerated. We've proven a better way - one platform built for every facet of transportation: shippers, carriers, private fleets, and brokers, all under one roof. Built to be loved. We're still the only ones who mean that.\nMastery Logistics Systems exists because the transportation industry deserves better. For too long, shippers and carriers have been forced to stitch together a patchwork of outdated, inadequate systems - one for dedicated fleet, another for brokerage, another for LTL, another for intermodal - none of them talking to each other, all of them slowing things down. Mastermind TMS changes that: one platform for every mode, every function, every stakeholder. Flexibility, visibility, and control - finally in one place.\nThe timing matters. Global supply chains are under pressure like never before, and the transportation industry is at the center of it. We're building the platform that helps this industry move faster, smarter, and more efficiently - tackling everything from AI-powered data ingestion to intelligent automation.\nWe are a masterful mosaic of specialists, builders, and genuinely good people. Different backgrounds, different talents, one shared obsession: creating something the industry has never had. We believe in diversity of thought, deep respect for each other, and the relentless pursuit of getting it right. We're small enough that every person makes a real impact - technically and culturally - and deliberate enough that we only add people who make the whole better.\nIf you're passionate about humanizing a complex industry, building for scale, and touching every corner of the global economy - welcome home. Let's build a masterpiece.\nBENEFITS - BECAUSE YOU SHOULD LOVE WHERE YOU WORK AND HOW YOU'RE TAKEN CARE OF\nWe don't do \"bare minimum\" here - not in the product, not in the culture, and definitely not in how we take care of our people. Mastery's benefit package is built to give you real coverage, real flexibility, and real peace of mind.\nMedical, Dental & Vision\nComprehensive health coverage so you can focus on the work, not the what-ifs.\nLife & AD&D Insurance\nCompany-paid life insurance at 1× your salary, plus AD&D and additional voluntary coverage options.\nLegal & Employee Assistance\nLegal assistance and employee support programs - for life's messier moments, big and small.\n401(k) with 4% Match\nWe invest in the platform and in your future. Save for retirement with a competitive company match.\nFlexible PTO\nManage your life and your schedule. We trust you to do great work and take the time you need to recharge.\nGiving Back - St. Jude Children's Research Hospital\nOur philanthropic partner is St. Jude Children's Research Hospital. Because doing good work and doing good in the world aren't mutually exclusive.\nRobust benefits. Real flexibility. A team that has your back. That's the Mastery standard.","description_format":"text","description_chars":6175,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Life insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Custom Software Development","Supply Chain & Logistics Software"],"lifecycle":[{"event":"open","at":"2026-10-06T16:53:36Z"}],"visa":[],"liveness":{"score":57,"band":"ok","label":"Likely open","p_open":1,"p_active":0.756,"p_room":0.75,"age_days":20,"expected_fill_days":23,"reasons":["conf:1","win:late"],"computed_at":"2026-10-22T06:10:10Z"},"pay":null,"html_url":"https://alion.io/job/mastery-security-operations-engineer","json_url":"https://alion.io/job/mastery-security-operations-engineer.json","meta":{"generated_at":"2026-10-22T18:13:22Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":719,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2393359},"rest":"https://alion.io/mcp/rest/get_company?id=2393359"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmastery-security-operations-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmastery-security-operations-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmastery-security-operations-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/mastery-security-operations-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmastery-security-operations-engineer"}]}