SecurityOperationsEngineer(SIEM/SOAR)

# Your Role As Security Operations Engineer (SIEM/SOAR), you shape and continuously evolve the detection and response capabilities at the heart of our Cyber Defense Center. You ensure that our security platforms deliver meaningful, actionable insights – turning threat intelligence, adversary behavior, and incident lessons learned into effective detection logic and automated response workflows. In close collaboration with SOC, CIRT, threat intelligence, platform engineering, and external service providers, you help strengthen our overall detection and response posture and enable the organization to react quickly and decisively to emerging cyber threats. \- Define and document detection use cases aligned with CDC priorities, threat intelligence, and MITRE ATT&CK techniques. \- Stay informed about current attack patterns to finetune detection use cases based on emerging threats, TTPs, and incident lessons learned. \- Maintain and modify SIEM and EDR analytic rules across the detection lifecycle. \- Finetune analytic rules to improve signal to noise ratio and reduce false positives. \- Design, configure, and maintain SOAR response playbooks to automate and orchestrate incident response actions. \- Manage watchlists, reference sets, and exception lists used by analytic rules and playbooks. \- Manage user accounts and permissions for the SIEM system and related detection tooling. \- Create custom queries, searches, and reports to support investigations, hunting, and operational reporting. \- Assist SOC analysts with analysis and troubleshooting of integrations, analytic rules and alert behavior. \- Collaborate with Threat Intelligence, SOC, CIRT, and platform teams to continuously improve detection coverage and response automation. Your Profile \- Degree in Computer Science, IT Security, or a related field, or equivalent work experience. \- Several years of hands‑on experience in detection engineering, SOC engineering, or security operations. \- Strong drive to achiev