Lead SOC Engineer

OnTrac

. Design and implement technical solutions for SOC alert orchestration (SOAR) .

Posted 10/17/2026full-timeRemote • United StatesSenior💰 $156,000 - $195,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and implementing security solutions, including SOC alert orchestration and automated risk monitoring tools, while leading integration efforts across EDR, SIEM, and cloud security platforms. Proficient in applying security-by-design principles and guiding teams through complex security incidents and technical risk assessments.

Highest-signal resume keywords

SOC Alert Orchestration (SOAR)Cloud Security (AWS/GCP)Network Security (Firewalls, Zero Trust)CISSP, CISM, GIAC, OSCP CertificationsPython, PowerShell, Bash Scripting

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Technical Risk AssessmentsSecurity Infrastructure DevelopmentIncident Response ExpertiseAutomation of Security TasksEDR ConfigurationSIEM Logic and YARA RulesVulnerability InterpretationSecurity-by-Design PrinciplesIntegration of Security ToolsHybrid Environment Security

Soft Skills

LeadershipMentoringCommunicationProblem-SolvingCollaboration

Tools & Technologies

EDR ToolsSIEM ToolsCloud Security ToolsAutomated Monitoring ToolsThreat Hunting Technologies

Certifications & Qualifications

CISSPCISMGIAC (GCIA, GCDA)Offensive Security Certified Professional (OSCP)

Industry Keywords

NIST CSFISO 27001SOC2Infrastructure VulnerabilitiesTechnical Controls

Tech Stack

Tools & technologies

AWSCloudCyber SecurityFirewallsGoogle Cloud PlatformPython

About the role

Key responsibilities & impact

Design and implement technical solutions for SOC alert orchestration (SOAR)
Provide the GRC team with automated risk monitoring tools
Lead integration of EDR, SIEM, and cloud security tools
Assist with technical risk assessments and identify infrastructure vulnerabilities
Recommend and implement remediation engineering
Develop and maintain security infrastructure in hybrid on-premises and cloud environments
Apply security-by-design principles to new deployments
Serve as a Tier 3 technical escalation point for complex security incidents
Provide deep forensic or architectural expertise during incident response
Guide junior engineers and analysts
Foster a culture of technical excellence and proactive security

Requirements

What you’ll need

Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field (or equivalent practical experience)
10 years of progressive experience in IT and Security, including at least 3 years in a senior or lead engineering capacity
CISSP, CISM, GIAC (GCIA, GCDA), or Offensive Security (OSCP) certifications strongly preferred
Proficiency across network security, including firewalls and Zero Trust
Experience with endpoint protection
Experience with cloud security, including AWS/GCP
Ability to code/script in Python, PowerShell, or Bash
Experience automating repetitive security tasks and integrations
Experience with SOC/threat hunting technologies
Deep understanding of SIEM logic, YARA rules, and EDR configuration
Ability to interpret NIST CSF, ISO 27001, or SOC2 frameworks and implement technical controls
Ability to explain technical vulnerabilities to non-technical risk stakeholders and vice versa

Benefits

Comp & perks

Medical, dental, and vision insurance
Life and short- and long-term disability coverage
401(k) retirement savings plan with company match
Flex vacation in states other than CA, CO, IL, MA, MT, and NE, with accruals up to 96 hours for first year of employment with tenure-based increases up to 160 hours
Two (2) floating holidays per year
Paid sick leave
Six (6) paid company holidays
Two (2) weeks paid pregnancy disability leave
Four (4) weeks paid parental bonding leave
Additional wellness and employee assistance programs