SalariesSign in
AboutPrivacyTerms
Security Operations Platform Engineer
First Quality

Security Operations Platform Engineer

United StatesRemoteFull-time
Posted Oct 2
Apply

Job Description

Founded over 35 years ago, First Quality is a family-owned company that has grown from a small business in McElhattan, Pennsylvania into a group of companies, employing over 5,000 team members, while maintaining our family values and entrepreneurial spirit. With corporate offices in New York and Pennsylvania and 8 manufacturing campuses across the U.S. and Canada, the companies within the First Quality group produce high-quality personal care and household products for large retailers and healthcare organizations. Our personal care and household product portfolio includes baby diapers, wipes, feminine pads, paper towels, bath tissue, adult incontinence products, laundry detergents, fabric finishers, and dishwash solutions. In addition, we manufacture certain raw materials and components used in the manufacturing of these products, including flexible print and packaging solutions.

Guided by our values of humility, unity, and integrity, we leverage advanced technology and innovation to drive growth and create new opportunities. At First Quality, you’ll find a collaborative environment focused on continuous learning, professional development, and our mission to Make Things Better®.

We are seeking a Security Operations Platform Engineer for our First Quality Enterprises, LLC company, working remotely. The Information Security team is actively seeking a platform engineer to join our SOC operations to support the design, implementation, management, and optimization of our SIEM/SOAR platform. This role ensures effective log ingestion, threat detection, alert tuning, reporting, automation, and overall platform health to enhance the organization’s security monitoring and incident response capabilities.

Primary responsibilities include:

  • Platform Management
    • Configure and maintain SIEM/SOAR platform
    • Monitor platform performance, availability, and data health
    • Review and maintain upgrades, integrations, and ongoing optimization
    • Manage role/scope-based access controls and data retention policies
  • Data Ingestion & Integration
    • Onboard and normalize log sources (firewalls, endpoints, servers, cloud, SaaS, identity providers, etc.)
    • Build integrations via scripting for custom data onboarding utilizing APIs
    • Troubleshoot ingestion issues and ensure log integrity and completeness
    • Review and maintain parsing rules and data mappings
    • Optimize data pipelines for performance and cost efficiency
  • SOC Operations Support
    • Develop, tune, and maintain detection rules logic, and alerting thresholds to improve fidelity and reduce false positives
    • Collaborate with SOC analysts during active investigations to provide platform support, log extraction, and forensic data retrieval
    • Vendor management and escalation support
  • Reporting & Dashboards
    • Build and maintain dashboards for SOC operations, compliance, and executive reporting
    • Develop and maintain scheduled and ad-hoc reports for stakeholders
    • Develop KPIs and metrics for security posture and incident trends
  • Continuous Improvement
    • Evaluate new log sources and security integrations
    • Recommend enhancements to improve visibility and coverage
    • Stay current on platform updates and best practices
    • Evaluate existing integrations and data to improve parsing, data normalization, and data reduction

The ideal candidate should possess the following:

  • Bachelor’s degree in Cybersecurity, Information Technology, or related field (or equivalent experience)
  • 3+ years of experience managing a SIEM platform
  • Knowledge of network protocols, firewalls, IDS/IPS, EDR, cloud security logs
  • Understanding of data normalization standards (CEF, LEEF, JSON, etc.)
  • Experience with SIEM query languages
  • Experience with scripting (Python, PowerShell, or similar) for automation
  • Working knowledge of MITRE ATT&CK, threat intelligence, and incident response processes
  • Preferred: 3+ years managing SOAR platform
  • Preferred: Experience developing automation, and response playbooks
  • Preferred: Familiarity with Azure, AWS, or GCP log configurations
  • Preferred: Experience supporting compliance frameworks (NIST, ISO 27001, SOX, HIPAA, etc.)
  • Preferred: Security+, CySA+, CASP+, GCIA, GCIH, CISSP or equivalent
  • Analytical and problem-solving skills
  • Strong troubleshooting and log analysis capabilities
  • Ability to translate security requirements into technical solutions
  • Strong communication skills for technical and executive audiences
  • Ability to work both independently and collaboratively in a fast-paced SOC environment

Travel up to 5 days per year

What We Offer You

We believe that by continuously improving the quality of our benefits, we can help to raise the quality of life for our team members and their families. At First Quality you will receive:

  • Competitive base salary and bonus opportunities
  • Paid time off (three-week minimum)
  • Medical, dental and vision starting day one
  • 401(k) with employer match
  • Paid parental leave
  • Child and family care assistance (dependent care FSA with employer match up to $2500)
  • Bundle of joy benefit (years’ worth of free diapers to all team members with a new baby)
  • Tuition assistance
  • Wellness program with savings of up to $4,000 per year on insurance premiums
  • ...and more!

First Quality is committed to protecting information under the care of First Quality Enterprises commensurate with leading industry standards and applicable regulations. As such, First Quality provides at least annual training regarding data privacy and security to employees who, as a result of their role specifications, may come in to contact with sensitive data.

First Quality is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, sexual orientation, gender identification, or protected Veteran status.

Originally posted on Himalayas

View job

Red Team Security Engineer

Backblaze

  • Colombia
  • Remote
  • Full-time
Apply
4 hrs ago
View job

Information Security Analyst (Product Assurance)

Lacuna Talent

  • United States
  • Remote
  • Full-time
Apply
4 hrs ago
View job
S

Senior Cyber Security Specialist

Softtest pays pty ltd

  • Australia
  • Remote
  • Full-time
Apply
5 hrs ago
View job

OT-Security Consultant / Penetration Tester (m/w/d)

Yekta IT GmbH

  • Germany
  • Remote
  • Full-time
Apply
5 hrs ago
View job
S

Client Assurance- InfoSec GRC - Remote US

SAMC SitusAMC Holdings Corp

  • United States
  • Remote
  • Full-time
Apply
5 hrs ago
View job

Network Security Engineer - Vulnerability & Compliance Focus

Support Tech LLC

  • United States
  • Remote
  • Full-time
Apply
6 hrs ago
View job

Principal AI Research Cybersecurity Scientist (Bay Area)

Alice

  • United States
  • Remote
  • Full-time
Apply
6 hrs ago
View job

Senior Risk Analyst

Apogee Global RMS

  • United States
  • Remote
  • Contract
Apply
8 hrs ago
View job

Security Compliance Engineer

Yuno

  • Argentina
  • Remote
  • Full-time
Apply
9 hrs ago
View job

Chief Information Security Officer (CISO) — Insurance & Investments

TheHiveCareers

  • Dominican Republic
  • Remote
  • Full-time
Apply
9 hrs ago
View job

Senior Incident Response Analyst

HealthEdge

  • United States
  • Remote
  • Full-time
Apply
9 hrs ago
View job
I

SME Security Control Assessor

IMAGINEEER LLC

  • United States
  • Remote
  • Full-time
Apply
10 hrs ago
View job

Cybersecurity Analyst Intermediate w/Splunk

General Dynamics Information Technology

  • United States
  • Remote
  • Full-time
Apply
10 hrs ago
View job

Information Security Risk Specialist

Booz Allen Hamilton

  • United States
  • Remote
  • Full-time
Apply
11 hrs ago
View job

Incident Response Analyst

Check Point Software

  • Australia
  • Remote
  • Full-time
Apply
12 hrs ago
View job

Mid-Level Security Automation Engineer

DecisionPoint Corporation

  • United States
  • Remote
  • Full-time
Apply
12 hrs ago
View job

Principal Security Compliance Analyst (FedRAMP) - Remote, U.S.

Entrust

  • United States
  • Remote
  • Full-time
Apply
12 hrs ago
View job
F

Cybersecurity Analyst II

Frontgrade Technologies

  • United States
  • Remote
  • Full-time
Apply
12 hrs ago
View job

Security Operations Engineer

Collectors

  • United States
  • Remote
  • Full-time
Apply
13 hrs ago
View job

IT Security Specialist (Microsoft Azure & 365 Focus)

Support Tech LLC

  • United States
  • Remote
  • Contract
Apply
14 hrs ago
View job

Cybersecurity Program Manager

Apogee Global RMS

  • United States
  • Remote
  • Contract
Apply
14 hrs ago
View job

Director, IT & Security

Illuminate Literacy

  • United States
  • Remote
  • Full-time
Apply
14 hrs ago
View job

Senior Security Operations Engineer

Sword Health

  • United States
  • Remote
  • Full-time
Apply
15 hrs ago
View job
S

Security Software Developer

Softtest pays pty ltd

  • Australia
  • Remote
  • Full-time
Apply
17 hrs ago
View job

National Security Manager

Fujifilm

  • United States
  • Remote
Apply
17 hrs ago
View job

Manager Identity & Trust Engineering

BlueCross BlueShield of Tennessee

  • United States
  • Remote
  • Full-time
Apply
18 hrs ago
View job

Senior Product Owner DevSecOps

Humana

  • United States
  • Remote
  • Full-time
Apply
18 hrs ago
View job

Sr. Engineer, Product Cyber Security

BD

  • United States
  • Remote
  • Full-time
Apply
18 hrs ago
View job

Sr. Security/ Technology Engineer

NV5

  • United States
  • Remote
  • Full-time
Apply
18 hrs ago
View job

Cyber Security Cloud Engineer

National Carwash Solutions

  • United States
  • Remote
  • Full-time
Apply
19 hrs ago
Page 1 of 128Next
First Quality

Security Operations Platform Engineer

United StatesRemoteFull-time
Posted Oct 2
Apply

Job Description

Founded over 35 years ago, First Quality is a family-owned company that has grown from a small business in McElhattan, Pennsylvania into a group of companies, employing over 5,000 team members, while maintaining our family values and entrepreneurial spirit. With corporate offices in New York and Pennsylvania and 8 manufacturing campuses across the U.S. and Canada, the companies within the First Quality group produce high-quality personal care and household products for large retailers and healthcare organizations. Our personal care and household product portfolio includes baby diapers, wipes, feminine pads, paper towels, bath tissue, adult incontinence products, laundry detergents, fabric finishers, and dishwash solutions. In addition, we manufacture certain raw materials and components used in the manufacturing of these products, including flexible print and packaging solutions.

Guided by our values of humility, unity, and integrity, we leverage advanced technology and innovation to drive growth and create new opportunities. At First Quality, you’ll find a collaborative environment focused on continuous learning, professional development, and our mission to Make Things Better®.

We are seeking a Security Operations Platform Engineer for our First Quality Enterprises, LLC company, working remotely. The Information Security team is actively seeking a platform engineer to join our SOC operations to support the design, implementation, management, and optimization of our SIEM/SOAR platform. This role ensures effective log ingestion, threat detection, alert tuning, reporting, automation, and overall platform health to enhance the organization’s security monitoring and incident response capabilities.

Primary responsibilities include:

  • Platform Management
    • Configure and maintain SIEM/SOAR platform
    • Monitor platform performance, availability, and data health
    • Review and maintain upgrades, integrations, and ongoing optimization
    • Manage role/scope-based access controls and data retention policies
  • Data Ingestion & Integration
    • Onboard and normalize log sources (firewalls, endpoints, servers, cloud, SaaS, identity providers, etc.)
    • Build integrations via scripting for custom data onboarding utilizing APIs
    • Troubleshoot ingestion issues and ensure log integrity and completeness
    • Review and maintain parsing rules and data mappings
    • Optimize data pipelines for performance and cost efficiency
  • SOC Operations Support
    • Develop, tune, and maintain detection rules logic, and alerting thresholds to improve fidelity and reduce false positives
    • Collaborate with SOC analysts during active investigations to provide platform support, log extraction, and forensic data retrieval
    • Vendor management and escalation support
  • Reporting & Dashboards
    • Build and maintain dashboards for SOC operations, compliance, and executive reporting
    • Develop and maintain scheduled and ad-hoc reports for stakeholders
    • Develop KPIs and metrics for security posture and incident trends
  • Continuous Improvement
    • Evaluate new log sources and security integrations
    • Recommend enhancements to improve visibility and coverage
    • Stay current on platform updates and best practices
    • Evaluate existing integrations and data to improve parsing, data normalization, and data reduction

The ideal candidate should possess the following:

  • Bachelor’s degree in Cybersecurity, Information Technology, or related field (or equivalent experience)
  • 3+ years of experience managing a SIEM platform
  • Knowledge of network protocols, firewalls, IDS/IPS, EDR, cloud security logs
  • Understanding of data normalization standards (CEF, LEEF, JSON, etc.)
  • Experience with SIEM query languages
  • Experience with scripting (Python, PowerShell, or similar) for automation
  • Working knowledge of MITRE ATT&CK, threat intelligence, and incident response processes
  • Preferred: 3+ years managing SOAR platform
  • Preferred: Experience developing automation, and response playbooks
  • Preferred: Familiarity with Azure, AWS, or GCP log configurations
  • Preferred: Experience supporting compliance frameworks (NIST, ISO 27001, SOX, HIPAA, etc.)
  • Preferred: Security+, CySA+, CASP+, GCIA, GCIH, CISSP or equivalent
  • Analytical and problem-solving skills
  • Strong troubleshooting and log analysis capabilities
  • Ability to translate security requirements into technical solutions
  • Strong communication skills for technical and executive audiences
  • Ability to work both independently and collaboratively in a fast-paced SOC environment

Travel up to 5 days per year

What We Offer You

We believe that by continuously improving the quality of our benefits, we can help to raise the quality of life for our team members and their families. At First Quality you will receive:

  • Competitive base salary and bonus opportunities
  • Paid time off (three-week minimum)
  • Medical, dental and vision starting day one
  • 401(k) with employer match
  • Paid parental leave
  • Child and family care assistance (dependent care FSA with employer match up to $2500)
  • Bundle of joy benefit (years’ worth of free diapers to all team members with a new baby)
  • Tuition assistance
  • Wellness program with savings of up to $4,000 per year on insurance premiums
  • ...and more!

First Quality is committed to protecting information under the care of First Quality Enterprises commensurate with leading industry standards and applicable regulations. As such, First Quality provides at least annual training regarding data privacy and security to employees who, as a result of their role specifications, may come in to contact with sensitive data.

First Quality is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, sexual orientation, gender identification, or protected Veteran status.

Originally posted on Himalayas