Security Operations Engineer

Summary / Objective

The Security Operations Lead Engineer is responsible for guiding the day-to-day operation of the SOC while maturing detection pipelines, hardening the environment, and leading the security scrum team. The role blends hands on engineering with team leadership, incident response, threat detection, automation, and process ownership. The ideal candidate brings strong experience with SIEM, XDR, cloud security, and Fortinet tooling while being able to run sprints, refine backlogs, and drive a predictable security roadmap.

Key Responsibilities

Threat Detection and Incident Response

• Lead detection engineering, alert tuning, log pipeline improvements, and security content development
• Own incident response workflow including triage, investigation, containment, remediation, and retrospective reviews
• Manage SIEM dashboards, queries, correlation rules, and parsing logic
• Drive continuous improvement using real incidents as inputs for detection upgrades

Security Team Leadership and Scrum Execution

Security Engineering and Automation

Fortinet and Infrastructure Security

Cloud Security

Documentation & Collaboration

Qualifications

What We Offer

ONE is an equal opportunity employer. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate based on race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, veteran status, or any other status protected under federal, state, or local law. We’re looking for team members who thrive in a collaborative, in-person environment and want to grow their career alongside passionate technologists.