Security Engineer - I (SOC)
About Tekion:
Positively disrupting an industry that has not seen any innovation in over 50 years, Tekion has challenged the paradigm with the first and fastest cloud-native automotive platform that includes the revolutionary Automotive Retail Cloud (ARC) for retailers, Automotive Enterprise Cloud (AEC) for manufacturers and other large automotive enterprises and Automotive Partner Cloud (APC) for technology and industry partners. Tekion connects the entire spectrum of the automotive retail ecosystem through one seamless platform. The transformative platform uses cutting-edge technology, big data, machine learning, and AI to seamlessly bring together OEMs, retailers/dealers and consumers. With its highly configurable integration and greater customer engagement capabilities, Tekion is enabling the best automotive retail experiences ever. Tekion employs close to 3,000 people across North America, Asia and Europe.
Job Introduction:
The Security Engineer I (SOC) is an entry-level, hands-on member of the company's 24x7 Security Operations Center, responsible for monitoring, triaging, and responding to security alerts across the company's technology environment. This role operates on a rotating shift schedule, including night shifts, weekends, and holidays, to ensure continuous security coverage. A major focus of this role is responding to and investigating security alerts, helping reduce false positives through detection tuning, assisting in building detection rules, supporting SOC metrics tracking, and contributing to automation using AI agents and SOAR workflows. The Engineer I works on well-defined tasks under the guidance of senior engineers and partners with IT, Engineering, and Security Operations to help identify risks and strengthen overall security posture.
Key Roles & Responsibilities
Work in a 24x7 SOC environment on a rotating shift schedule, including night shifts, weekends, and holidays, providing continuous alert monitoring and response coverage.
Monitor, triage, and investigate security alerts from SIEM, EDR, cloud, network, and identity sources; escalate suspicious or confirmed activity to senior engineers per established procedures.
Help reduce false positives by identifying noisy alerts, documenting tuning recommendations, and assisting with detection tuning under guidance.
Assist in building and testing detection rules and use cases aligned to frameworks such as MITRE ATT&CK.
Contribute to automation efforts, including building and maintaining SOAR playbooks and supporting AI agent-driven workflows for alert enrichment, triage, and response.
Support tracking and reporting of SOC metrics (e.g., alert volume, false positive rates, MTTD, MTTR) as directed.
Participate in incident response activities, including evidence gathering, containment steps, and documentation, under the direction of senior engineers.
Assist in operating and maintaining security tools, monitoring systems, and access controls that support SOC operations.
Support vulnerability management activities, including running scans and helping coordinate remediation.
Follow and help maintain security documentation, runbooks, playbooks, and knowledge bases to support consistent shift handoffs.
Assist in maintaining compliance with security standards and regulatory requirements (e.g., SOC 2, ISO 27001, NIST).
Stay current on emerging security threats, detection techniques, AI-driven security tooling, and technologies.
Basic Qualifications
Bachelor's degree in Computer Science, Cybersecurity, or related field.
1-3 years of experience in cybersecurity, information security, or a related technical field.
Willingness and ability to work in a 24x7 SOC on a rotating shift schedule, including night shifts, weekends, and holidays.
Hands-on experience with security tools (e.g., vulnerability scanners, SIEMs, endpoint protection).
Familiarity with cloud platforms (AWS, GCP, Azure) and basic cloud security practices.
Understanding of networking, authentication, and access control principles.
Interest or exposure to detection engineering, SOAR automation, or AI-assisted security workflows is a plus.
Basic scripting experience (Python, Bash, or equivalent) preferred.
Strong analytical, troubleshooting, and communication skills.
Entry-level certifications such as Security+, GSEC, or BTL1 are a plus.
Perks & Benefits
Opportunity to work with some of the smartest minds to solve complex challenges at scale.
Impactful role in shaping and securing a global, cloud-native & AI driven platform.
Innovative, collaborative, and fast-paced culture.
Effective 4 Aug 2026, Current Tekion Employees should apply via the Internal Job Board in Ashby
Tekion is proud to be an Equal Employment Opportunity employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, victim of violence or having a family member who is a victim of violence, the intersectionality of two or more protected categories, or other applicable legally protected characteristics.
For more information on our privacy practices, please refer to our Applicant Privacy Notice here.