Security Operations Engineer - Level 3

We are seeking an experienced Level 3 Security Engineer with strong expertise in Security Operations, Detection Engineering, SIEM/SOAR, EDR, and cloud security. The ideal candidate will support advanced security monitoring, detection development, alert tuning, and incident investigation across enterprise environments. Primary Responsibilities Monitor and investigate advanced security events using SIEM, SOAR, EDR, email security gateways, and firewalls. Develop, implement, and maintain security detections, rules, and alerts. Perform rule and alert tuning to improve detection accuracy and reduce false positives. Conduct advanced security investigations and support incident response and threat analysis. Map security detections and activities to the MITRE ATT&CK framework, including relevant tactics and techniques. Develop and enhance detection use cases based on emerging threats and attack patterns. Work across AWS, Azure, and/or GCP environments to monitor and improve cloud security. Collaborate with Security Operations, Incident Response, Threat Intelligence, and Engineering teams. Troubleshoot complex security monitoring and detection issues and provide Level 3 technical support. Continuously improve security monitoring, detection coverage, and operational processes. Required Skills Strong experience in Security Operations / Security Engineering. Hands-on experience with SIEM/SOAR, EDR, email security, and firewall technologies. Proven experience in Detection Engineering. Experience developing and tuning security rules, alerts, and detection logic. Strong understanding of the MITRE ATT&CK framework. Experience with AWS, Azure, and/or GCP security environments. Familiarity with Google Security Operations. Strong analytical, troubleshooting, and incident investigation skills.