Security Engineer

Description

The Security Engineer designs, deploys, integrates, and maintains the security platforms that support Sourcepass managed security services and client environments. This role owns the technical quality and operational health of security tooling across onboarding, migration, steady-state operations, and offboarding. The engineer partners with SOC analysts, service delivery teams, vendors, and clients to improve detection coverage, automate repeatable work, resolve escalations, and ensure that deployed controls remain measurable, supportable, and aligned to service requirements.

Requirements

• Design, deploy, configure, and maintain security technologies across endpoint protection, EDR/MDR, SIEM, SOAR, vulnerability management, identity security, email security, security awareness, backup security, and related integrations.
• Monitor platform health, data ingestion, agent coverage, licensing, connector status, policy drift, and service availability; investigate gaps and drive issues through resolution.
• Build and maintain SIEM detections, alert rules, enrichment logic, integrations, and automation workflows that improve alert fidelity and reduce repetitive analyst effort.
• Identify non-actionable, duplicate, or consistently benign alerts and recommend evidence-based tuning, correlation, allowlisting, severity changes, or automation while documenting security impact and compensating controls.
• Provide advanced technical escalation support for security tools, failed deployments, integration issues, telemetry gaps, and complex client environments.
• Partner with SOC operations to translate incident and alert trends into engineering improvements, including new detections, response actions, automation, and platform hardening.
• Understanding of networks, workstation, and server related technologies with a concentration in security concepts
• Coordinate with clients, internal service teams, and vendors to communicate requirements, implementation plans, risks, dependencies, status, and technical outcomes.
• Participate in implementation reviews, troubleshooting sessions, operational handoffs, and service-improvement initiatives.
• Self-driven problem-solving abilities, with the capability to learn
• Respond to events and alerts and resolve issues
• Good interpersonal and relational team-building skills