Senior SOC Engineer

Own advanced security monitoring and incident investigations as an L3 escalation point for the SOC. Design and mature SOC processes, detection architecture, and operational metrics, while building SIEM detection rules and response playbooks using Detection as Code. Translate MITRE ATT&CK tactics into practical detections across Linux, AWS/GCP cloud, and microservices, and lead hypothesis-based threat hunting in collaboration with cross-functional teams.