Information Security Engineer role supporting SOC operations through SIEM/SOAR engineering, automation, and threat hunting in Foster City, CA.

Maintain and optimize SIEM and SOAR platforms to support dependable detection and efficient security response
Develop and fine-tune SIEM detection and correlation rules, plus associated dashboards and reports to surface anomalous activity accurately
Create, manage, and continuously improve SOAR playbooks to automate incident response workflows and streamline SOC operations
Use Python scripting to create custom integrations and automate recurring SOC tasks, including alert triage and incident response support
Perform proactive threat hunting by analyzing alerts and data from multiple sources to identify detection gaps and potential indicators of compromise

6+ years of experience in a Security Engineering role supporting a SOC environment or comparable function
Proven experience with SOAR platforms and playbook development, including one or more of:
- Palo Alto Cortex XSOAR
- Splunk SOAR
- Tines
Strong proficiency in Python for automation and scripting security tasks
Solid understanding of incident response methodologies, threat intelligence, and cybersecurity frameworks, including:
- MITRE ATT&CK
- NIST
Excellent analytical and problem-solving skills, with the ability to operate effectively in a fast-paced environment

Strengthen the security posture through automation, detection tuning, and threat hunting
Improve and expand SIEM/SOAR workflows that influence how incidents are identified and handled
Collaborate with Information Security and cross-functional teams to enhance overall organizational security
Own clear documentation for detection rules, automation workflows, and incident response procedures
Hands-on engineering work that converts security insights into repeatable, automated actions

Information Security Engineer

Location: Foster City, CA (onsite)
Schedule: onsite
Pay: USD $75–$80/hour + benefits
Experience: 6+ years

Job Description