Senior Engineer, IT - SecOps

About the role

We’re seeking a hands-on Security Operations Engineer who thrives in a 24x7 environment and can detect, analyze, and respond to cyber threats in real time. This role’s primary focus is SOC monitoring and incident response; the secondary focus includes security engineering work to mature detections, tune tooling, automate workflows, and harden the environment.

Senior Engineers must be capable of operating without direct oversight. They must possess a sufficient depth of experience and knowledge in IT and security to be responsible for performing complex engineering tasks, including tool testing, deployment, maintenance, troubleshooting, and enhancements. Additionally, they must possess the technical analytical skills to support intrusion detection and incident response (IR) activities, including threat hunting, leading IR engagements, and performing forensics as needed. They must have strong oral and written communications skills as they will, at times, be expected to interface in a professional manner with senior personnel across the IT organization and develop detailed process and technical documentation. As a senior member of the SecOps team, Senior Engineers will be expected to provide mentorship, support, and training to Engineers, as needed.

Responsibilities

Primary - Security Operations (70-80%)

• Monitor SIEM/XDR/SOAR and other telemetry for alerts, anomalies, and indicators of compromise (IOCs).
• Perform Level 1-2 triage, enrichment, scoping, and prioritization of events.
• Execute response playbooks (isolation, containment, account/device quarantine, EDR actions, network blocks).
• Lead or support incident investigations (forensics acquisition, timeline analysis, root cause).
• Document incidents thoroughly (IR tickets, evidence handling, post-incident reports).
• Conduct proactive hunts using hypotheses tied to current TTPs (e.g., MITRE ATT&CK).
• Draft, test, and deploy high-fidelity detections and correlation rules; reduce alert noise.
• Operationalize threat intel (IOCs, behavioral analytics) into monitoring and detections.
• Track and respond to emerging threats and vulnerabilities impacting our stack.
• Maintain shift logs, knowledge base updates, runbooks, and handoffs.

Secondary - Security Engineering (20-30%)

• Support deployment, configuration, and maintenance of SIEM/XDR/SOAR, IDS/IPS, E-mail security, WAF, CASB, DLP, PAM, and endpoint security platforms.
• Build and maintain data sources, parsers/normalization, health checks, and content packs.
• Implement security baselines, hardening guides, and secure configurations across endpoints, servers, cloud, and network devices.
• Integrate cloud telemetry (AWS/GCP/Azure), identity signals (Entra ID/Okta/AD), and SaaS logs into monitoring with robust detections.

Requirements

• 5+ years relevant work experience. Or an equivalent combination of experience and education.
• Clear written and verbal communication, decision-making under pressure, and strong collaboration across IT and business teams.
• Ability to work independently on shift and drive incidents to closure.

Preferred Qualifications

• Certifications: GCIA, GMON, GDAT, CySA+, CASP+, CISSP (or equivalent experience).
• Experience with SentinelOne, Zscaler ZIA, Google Secops, Azure/M365 security tooling, E-mail security, and PAM.

Skills

• Detection & Response: Rapid triage, scoping, and containment with minimal escalation.
• Analytical Rigor: Able to transform raw telemetry into actionable insights.
• Engineering Mindset: Build/tune detections, automate repetitive work, and improve data quality.
• Risk Orientation: Prioritize actions based on business impact and threat likelihood.
• Documentation: Clear tickets, IR timelines, and post-incident reporting.

BFS Competencies

• Business and Financial Acumen: Understands KPIs and how BFS makes money. Demonstrates functional and/or technical expertise. Understands complex issues and demonstrates problem-solving skills. Understands how to maximize business results regardless of industry cycle.
• Results Driven: Holds self and others accountable. Communicates and sets clear goals with plans to deliver. Manages competing priorities effectively. Demonstrates appropriate urgency. Drives to exceed expectations in alignment with BFS SPICE values. Embraces and follows best practices. Demonstrates self-starter, can-do attitude.
• Strategic Thinking and Decision Making: Leverages resources and teams to solve problems and create mutually beneficial outcomes. Demonstrates willingness and courage to make tough decisions in a timely manner. Balances short-and-long term priorities. Demonstrates proactive versus reactive thinking. Asks questions to identify root cause and analyze situations more accurately.
• Servant Leadership: Demonstrates humility by putting others first. Builds trust-based relationships. Leads by example with kindness and respect. Collaborates well across all areas of the business. Advocates for others. Actively listens to understand the meaning and intent of what the other person is communicating. Demonstrates authenticity and encourages others to do the same.
• Emotional Intelligence: Demonstrates situational awareness - knows when and how to adjust leadership style in different situations. Demonstrates self-awareness - understands strengths and weaknesses. Demonstrates empathy - puts themselves in others' shoes. Assumes positive intent.
• Develops and Leads Others: Drives alignment through clear communication of vision, goals, and expectations. Invests time on a regular basis in performance feedback and developmental conversations. Fosters a respectful and inclusive environment. Empowers, motivates, and inspires others. Coaches and mentors others for their development. Guides and persuades others to deliver positive outcomes.
• Growth Mindset: Demonstrates a growth mindset; takes appropriate risks, fails fast and forward, learns from mistakes. Perseveres and champions growth, even in the face of resistance, ambiguity, or possible failure. Thinks like an owner with an entrepreneurial spirit. Demonstrates and encourages intellectual curiosity. Continuous learner; seeks opportunities and knowledge for personal and professional growth. Sees possibilities over problems - actively seeks solutions.
• Innovation: Encourages out-of-the-box thinking to create new ways of doing things. Continuously seeks to improve and simplify pain points in the business. Anticipates, embraces, and leads change. Develops and executes breakthrough strategies.
• Integrity: Does the right thing even under challenging circumstances. Communicates with honesty. Consistently treats others fairly and equitably. Demonstrates reliability and does what they say they will do. Conducts tough conversations and delivers difficult messages with kindness and respect.

Work Environment / Physical Activity

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Subject to both typical office environment and outside locations with temperature and weather variations.
• Must be able to lift and carry up to 25 pounds.
• Occasional travel may be required.

Benefits

In addition to the base wage, this position is also eligible to earn an annual bonus subject to changes in plan design and documents and in accordance with applicable law. Eligibility and the amount of the bonus varies based on overall company success, thresholds met, and other terms and conditions of the Company’s active bonus policy for the respective year.

We offer competitive, affordable benefits designed to make life better for you and the people you love. Our goal is simple — provide great plans that help you and your family to live happier, healthier, and more secure lives. This role is eligible for:

• Medical, dental, vision, and disability insurance plans
• 401(k) retirement savings plan
• Paid time off (PTO) including paid sick time
• 8 paid holidays per year (for salaried and hourly team members)