{"schemaVersion":"jobsearcher.job.v1","id":"cfc09f6124cc99ddb27fdd2f","url":"https://jobsearcher.com/jobs/cfc09f6124cc99ddb27fdd2f","canonicalUrl":"https://jobsearcher.com/jobs/cfc09f6124cc99ddb27fdd2f","title":"Security Operations Engineer","description":"OverviewIn this role, you'll design and tune detections in a Microsoft Sentinel–driven environment and build SOAR automation to keep a lean security team ahead of threats. You'll own detection engineering for MasterMind, Mastery's Azure-native TMS, and close visibility gaps across AKS, endpoints, and network telemetry. You'll work hands-on with analytics rules, threat context, and automation to reduce noise and triage time, partnering with cross-functional teams. This is a deeply technical, individual-contributor role focused on shipping detections and automation that scale with the platform.Compensation / BenefitsMedical, Dental & VisionLife & AD&D InsuranceLegal & Employee Assistance401(k) with 4% MatchFlexible PTOGiving Back — St. Jude Children's Research HospitalResponsibilitiesDesign, write, and tune analytics rules and correlation logic in Microsoft Sentinel aligned to MITRE ATT&CKClose visibility gaps across infrastructure and telemetry as new log sources come onlineRefine detections to reduce false positives while preserving real signalsDesign and build SOAR playbooks and workflows to automate triage, enrichment, and responseIntegrate Sentinel, Defender, and other security tools via APIs and scriptingTranslate emerging threats into actionable, tuned detection logic and stay hands-on with Sentinel/SOAR capabilitiesKey requirements4+ years in security operations or detection engineeringHands-on experience building or tuning detection rules in a SIEM (Sentinel strongly preferred)Experience building SOAR playbooks or security automation workflowsFluent in KQL or equivalent SIEM query languageScripting and API proficiency (Python or PowerShell) for automation and REST API integrationsSelf-directed, independent work styleself-directedhighly analyticalproblem-solving orientationKQL fluencyMicrosoft SentinelSOAR automation","company":"Mastery Systems","rawCompany":"mastery systems","city":"Springfield","state":"MA","isRemote":false,"isActive":false,"createdAt":"2026-10-26T13:17:14.617Z","occupations":[{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"},{"code":"15-1299.08","title":"Computer Systems Engineers/Architects","slug":"computer-systems-engineers-architects"},{"code":"15-1212.00","title":"Information Security Analysts","slug":"information-security-analysts"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"},{"code":"513210","title":"Software Publishers","slug":"software-publishers"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Security Operations Engineer","description":"OverviewIn this role, you'll design and tune detections in a Microsoft Sentinel–driven environment and build SOAR automation to keep a lean security team ahead of threats. You'll own detection engineering for MasterMind, Mastery's Azure-native TMS, and close visibility gaps across AKS, endpoints, and network telemetry. You'll work hands-on with analytics rules, threat context, and automation to reduce noise and triage time, partnering with cross-functional teams. This is a deeply technical, individual-contributor role focused on shipping detections and automation that scale with the platform.Compensation / BenefitsMedical, Dental & VisionLife & AD&D InsuranceLegal & Employee Assistance401(k) with 4% MatchFlexible PTOGiving Back — St. Jude Children's Research HospitalResponsibilitiesDesign, write, and tune analytics rules and correlation logic in Microsoft Sentinel aligned to MITRE ATT&CKClose visibility gaps across infrastructure and telemetry as new log sources come onlineRefine detections to reduce false positives while preserving real signalsDesign and build SOAR playbooks and workflows to automate triage, enrichment, and responseIntegrate Sentinel, Defender, and other security tools via APIs and scriptingTranslate emerging threats into actionable, tuned detection logic and stay hands-on with Sentinel/SOAR capabilitiesKey requirements4+ years in security operations or detection engineeringHands-on experience building or tuning detection rules in a SIEM (Sentinel strongly preferred)Experience building SOAR playbooks or security automation workflowsFluent in KQL or equivalent SIEM query languageScripting and API proficiency (Python or PowerShell) for automation and REST API integrationsSelf-directed, independent work styleself-directedhighly analyticalproblem-solving orientationKQL fluencyMicrosoft SentinelSOAR automation","datePosted":"2026-10-26T13:17:14.617Z","dateModified":"2026-10-26T13:17:14.617Z","hiringOrganization":{"@type":"Organization","name":"Mastery Systems","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Springfield","addressRegion":"MA","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"cfc09f6124cc99ddb27fdd2f"},"url":"https://jobsearcher.com/jobs/cfc09f6124cc99ddb27fdd2f"}}