Job details

SecOps Observability Engineer - North Central region (Remote in the U.S.)

GuidePoint Security is a rapidly growing, privately-held cybersecurity firm that advises Fortune 500 companies and U.S. government agencies. The SecOps Observability Engineer will design, implement, and tune observability and detection capabilities (SIEM, SOAR, Cribl and related tools) to improve threat detection, incident response, and SOC effectiveness across enterprise environments.

Skills

Hands-on experience with SIEM and SOAR platforms (development, tuning, and incident workflows).
Experience with data stream management tools (Cribl or equivalent) and log pipeline engineering.
Strong knowledge of log management, monitoring, alerting, parsing, aggregation, and normalization.
Proven SOC experience in threat detection, incident response, and security event monitoring.
Ability to write concise technical documentation and produce incident reports.
Effective communication and collaboration with stakeholders and vendors.

Responsibilities

Design, deploy, and tune SIEM and SOAR rules, alerts, and playbooks to surface critical threats with low false positive rates.
Build and maintain data ingestion, transformation, enrichment, parsing, aggregation, and normalization workflows (including Cribl or similar).
Operate within SOC workflows: threat detection, triage, investigation, and incident response support.
Develop and maintain detection content, runbooks, and automation to accelerate mean-time-to-detect and respond.
Collaborate with internal stakeholders, client teams, and external vendors to integrate log sources and telemetry.
Produce clear incident reports, metrics dashboards, and technical documentation on system performance and detections.
Support continuous improvement of observability platform performance, storage, and alerting strategies.

Education

Bachelor's degree in a relevant discipline or equivalent experience.
Relevant industry certifications preferred (e.g., Splunk, GCNA/Elastic, GIAC, CISSP) but not required.

Benefits

Remote-first U.S.-based workforce with occasional travel or on-site requirements for some roles.
Group medical insurance with competitive employer premium contributions and HSA options.
Group dental insurance with employer-covered employee premiums.
12 corporate holidays and Flexible Time Off (FTO) program.
Mobile phone and home internet allowance.
Eligibility for retirement plan after 2 months and pet benefit option.

To read the complete job description, please click on the ‘Apply’ button

SecOps Observability SIEM SOAR Cribl Splunk XSIAM Elastic CrowdStrike Log Management Incident Response SOC Engineer Detection Engineering Alert Tuning

GuidePoint Security Glassdoor Company Review

4.3

GuidePoint Security DE&I Review

No rating

CEO of GuidePoint Security

Michael Volk

Approve of CEO

Average salary estimate

$135000 / YEARLY (est.)

min

max

$110000K

$160000K

If an employer mentions a salary or salary range on their job, we display it as an "Employer Estimate". If a job has no salary data, Rise displays an estimate if available.

Similar Jobs

SecOps Engineer - North Central region (Remote in the U.S.)

GuidePoint Security Hybrid Remote in the U.S.