Security Engineer – Remote

About the role

Everforth ECS is looking for a Security Engineer to join its remote team. You will support the engineering, implementation, and optimization of security technologies that enable effective enterprise security monitoring and incident response.

Key responsibilities

• Administer and optimize SOC platforms including SIEM and EDR.
• Configure and maintain telemetry integrations across infrastructure, cloud, identity, and endpoint environments.
• Develop, tune, and maintain detection rules, alerts, and correlation logic.
• Monitor SIEM performance, data ingestion pipelines, and log normalization processes.
• Implement and maintain automation and orchestration workflows to improve SOC efficiency.
• Provide technical support to SOC analysts during investigations, threat hunting, and incident response.
• Collaborate with enterprise IT, cloud, and infrastructure teams to onboard new systems.
• Monitor health, reliability, and performance of security monitoring infrastructure.
• Maintain documentation for detection logic, engineering procedures, telemetry integrations, and platform configurations.

Required profile

• Ability to work closely with SOC analysts, enterprise IT teams, and platform owners.
• Strong focus on reliability, scalability, and operational effectiveness of security monitoring.

Required skills

• Experience with SIEM platforms.
• Experience with Endpoint Detection and Response (EDR) solutions.
• Security telemetry integration across cloud and on‑premise environments.
• Detection rule development and tuning.
• Log normalization and data ingestion pipeline management.
• Automation and orchestration workflow implementation.