Lead SOC Engineer

OnTrac

. Design and implement technical solutions for SOC alert orchestration (SOAR) .

Posted 10/17/2026full-timeRemote • United StatesSenior💰 $156,000 - $195,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and implementing security solutions, including SOC alert orchestration and automated risk monitoring tools. Proficient in integrating EDR, SIEM, and cloud security technologies while applying security-by-design principles in hybrid environments.

Highest-signal resume keywords

SOC Alert Orchestration (SOAR)EDR IntegrationSIEM ConfigurationCISSP CertificationGRC Fluency (NIST CSF, ISO 27001)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Network SecurityCloud Security (AWS/GCP)Scripting (Python, PowerShell, Bash)Vulnerability AssessmentRemediation Engineering

Soft Skills

Technical CommunicationMentoring

Tools & Technologies

SOC TechnologyThreat Hunting TechnologyAutomated Evidence Collection

Certifications & Qualifications

CISSPCISMGIAC (GCIA, GCDA)Offensive Security (OSCP)

Industry Keywords

Zero TrustISO 27001SOC 2NIST CSF

Tech Stack

Tools & technologies

AWSCloudCyber SecurityFirewallsGoogle Cloud PlatformPython

About the role

Key responsibilities & impact

Design and implement technical solutions for SOC alert orchestration (SOAR)
Provide the GRC team with automated risk monitoring tools
Lead integration of EDR, SIEM, and cloud security tools
Assist with technical risk assessments and identify infrastructure vulnerabilities
Recommend and implement remediation engineering
Develop and maintain security infrastructure in hybrid on-premises/cloud environments
Apply security-by-design principles to new deployments
Serve as a Tier 3 technical escalation point for complex security incidents
Guide junior engineers and analysts
Optimize SOC detection capabilities and translate regulatory requirements into technical controls and automated evidence collection

Requirements

What you’ll need

Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field (or equivalent practical experience)
10 years of progressive experience in IT and Security, including at least 3 years in a senior or lead engineering capacity
CISSP, CISM, GIAC (GCIA, GCDA), or Offensive Security (OSCP) certifications strongly preferred
Generalist proficiency across network security, including firewalls and Zero Trust, endpoint protection, and cloud security (AWS/GCP)
Scripting and automation experience using Python, PowerShell, or Bash
Experience with SOC/threat hunting technology, SIEM logic, YARA rules, and EDR configuration
GRC fluency with NIST CSF, ISO 27001, or SOC 2 frameworks
Ability to explain deep technical vulnerabilities to non-technical risk stakeholders and vice versa

Benefits

Comp & perks

Medical, dental, and vision insurance
Life and short- and long-term disability coverage
401(k) retirement savings plan with company match
Flex vacation in states other than CA, CO, IL, MA, MT, and NE, with accruals up to 96 hours for first year of employment with tenure-based increases up to 160 hours
Two (2) floating holidays per year
Paid sick leave
Six (6) paid company holidays
Two (2) weeks paid pregnancy disability leave
Four (4) weeks paid parental bonding leave
Additional wellness and employee assistance programs