SOC Engineer 3

Build and continuously tune detection rules and correlation logic across SIEM and EDR platforms while mapping coverage to MITRE ATT&CK. Lead high-severity incident response with log analysis, digital forensics triage, and root-cause reconstruction. Create automation playbooks in SOAR and use Python scripting to streamline triage and incident workflows. Own SOC KPIs like MTTD/MTTR and false positive rate, and mentor the SOC team to improve readiness through simulations.