IT Security Engineer IV : 26-02978

This role focuses on building and maintaining the core technological infrastructure of a Security Operations Center. You will engineer solutions for detection, automation, and platform management to enhance SOC efficiency and effectiveness. The position requires a blend of hands-on technical skills and a strategic approach to security engineering.

Key Responsibilities:

• Administer and enhance the ServiceNow Security Incident Response module.
• Develop and maintain the Detection-as-Code pipeline for automated deployments.
• Create and refine security detections across various data sources.
• Build SOAR playbooks and integrations for workflow automation.
• Contribute to AI-driven SOC initiatives for improved operations.

Must-Have Skills:

• Proven experience in a SOC engineering or senior analyst role.
• Hands-on administration of ServiceNow Security Incident Response.
• Proficiency in Python scripting and building automation pipelines.

Experience in cybersecurity operations and a strong understanding of threat detection and incident response frameworks is essential.