Senior Engineer, IT - SecOps

PURPOSE Senior Engineers must be capable of operating without direct oversight. They must also possess a sufficient depth of experience and knowledge in IT and security to be responsible for performing complex engineering tasks, including tool testing, deployment, maintenance, troubleshooting and enhancements. Additionally, they must possess the technical analytical skills to support intrusion detection and incident response (IR) activities, including threat hunting, leading IR engagements and performing forensics as needed.  They must have strong oral and written communications skills as they will, at times, be expected to interface in a professional manner with senior personnel across the IT organization and develop detailed process and technical documentation. As a senior member of the SecOps team, Senior Engineers will be expected to provide mentorship, support and training to Engineers, as needed.   We’re seeking a hands-on Security Operations Engineer who thrives in a 24x7 environment and can detect, analyze, and respond to cyber threats in real time. This role’s primary focus is SOC monitoring and incident response; the secondary focus includes security engineering work to mature detections, tune tooling, automate workflows, and harden the environment.   ESSENTIAL DUTIES AND RESPONSIBILITIES   Primary – Security Operations (70–80%) Monitor SIEM/XDR/SOAR and other telemetry for alerts, anomalies, and indicators of compromise (IOCs). Perform Level 1–2 triage, enrichment, scoping, and prioritization of events. Execute response playbooks (isolation, containment, account/device quarantine, EDR actions, network blocks). Lead or support incident investigations (forensics acquisition, timeline analysis, root cause). Document incidents thoroughly (IR tickets, evidence handling, post-incident reports). Conduct proactive hunts using hypotheses tied to current TTPs (e.g., MITRE ATT&CK). Draft, test, and deploy high-fidelity detections and correlation rules; reduce alert noise. Operationalize threat intel (IOCs, behavioral analytics) into monitoring and detections. Track and respond to emerging threats and vulnerabilities impacting our stack. Maintain shift logs, knowledge base updates, runbooks, and handoffs.   Secondary – Security Engineering (20–30%) Support deployment, configuration, and maintenance of SIEM/XDR/SOAR, IDS/IPS, E-mail security, WAF, CASB, DLP, PAM, and endpoint security platforms. Build and maintain data sources, parsers/normalization, health checks, and content packs. Implement security baselines, hardening guides, and secure configurations across endpoints, servers, cloud, and network devices. Integrate cloud telemetry (AWS/GCP/Azure), identity signals (Entra ID/Okta/AD), and SaaS logs into monitoring with robust detections.   SUPERVISORY RESPONSIBILITIES This job has no supervisory responsibilities.   MINIMUM REQUIREMENTS To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required.   5+ years relevant work experience.   Or an equivalent combination of experience and education.  Clear written and verbal communication, decision-making under pressure, and strong collaboration across IT and business teams. Ability to work independently on shift and drive incidents to closure.   PREFERRED QUALIFICATIONS Certifications: GCIA, GMON, GDAT, CySA+, CASP+, CISSP (or equivalent experience). Experience with SentinelOne, Zscaler ZIA, Google Secops, Azure/M365 security tooling, E-mail security and PAM   COMPETENCIES   Detection & Response: Rapid triage, scoping, and containment with minimal escalation. Analytical Rigor: Able to transform raw telemetry into actionable insights. Engineering Mindset: Build/tune detections, automate repetitive work, and improve data quality. Risk Orientation: Prioritize actions based on business impact and threat likelihood. Documentation: Clear tickets, IR timelines, and post-incident reporting.   BFS COMPETENCIES   Business and Financial Acumen Understands KPIs and how BFS makes money. Demonstrates functional and/or technical expertise. Understands complex issues and demonstrates problem solving skills. Understands how to maximize business results regardless of industry cycle. Results Driven Holds self and others accountable. Communicates and sets clear goals with plans to deliver. Manages competing priorities effectively. Demonstrates appropriate urgency. Drives to exceed expectations in alignment with our BFS SPICE values. Embraces and follows best practices. Demonstrates self-starter, can-do attitude. Strategic Thinking and Decision Making Leverages resources and teams around them to solve problems and create mutually beneficial outcomes. Demonstrates willingness and courage to make tough decisions in a timely manner. Balances short-and-long term priorities Demonstrates proactive versus reactive thinking. Asks questions to identify root cause and analyze situations more accurately. Servant Leadership Demonstrates humility by putting others first. Builds trust-based relationships. Leads by example with kindness and respect. Collaborates well across all areas of the business. Advocates for others Actively listens to understand the meaning and intent of what the other person is communicating. Demonstrates authenticity and encourages others to do the same. Emotional Intelligence Demonstrates situational awareness – knows when and how to adjust leadership style in different situations. Demonstrates self-awareness – understands strengths and weaknesses. Demonstrates empathy – puts themselves in other’s shoes. Assumes positive intent. Develops and Leads Others Drives alignment through clear communication of vision, goals, and expectations. Invests time on a regular basis in performance feedback and developmental conversations. Fosters a respectful and inclusive environment. Empowers, motivates, and inspires others. Coaches and mentor others for their development. Guides and persuades others to deliver positive outcomes. Growth Mindset Demonstrates a growth mindset; takes appropriate risks, fails fast and forward, learns from mistakes. Perseveres and champions growth, even in the face of resistance, ambiguity, or possible failure. Thinks like an owner with an entrepreneurial spirit. Demonstrates and encourages intellectual curiosity. Continuous learner; seeks opportunities and knowledge for personal and professional growth. Sees possibilities over problems – actively seeks solutions. Innovation Encourages out-of-the box thinking to create new ways of doing things. Continuously seeks to improve and simplify pain points in the business. Anticipates, embraces, and leads change. Develops and executes breakthrough strategies. Integrity Does the right thing even under challenging circumstances? Communicates with honesty. Consistently treats others fairly and equitably. Demonstrates reliability and does what they say they will do. Conducts tough conversations and delivers difficult messages with kindness and respect.   WORK ENVIRONMENT / PHYSICAL ACTIVITY The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.   Subject to both typical office environment and outside locations with temperature and weather variations. Must be able to lift and carry up to 25 pounds. Occasional travel may be required.