SOC & SIEM Operations Developer
Job Description
About the Role
We are looking for an experienced SOC & SIEM Operations Developer to join our team. The ideal candidate has hands-on experience with Splunk, Microsoft Sentinel, CrowdStrike Falcon and can deliver production-ready solutions. You will work closely with cross-functional teams to build, customize, and optimize our SOC & SIEM Operations environment.
Key Responsibilities
- Design, develop, and maintain SOC & SIEM Operations solutions aligned with business requirements.
- Collaborate with product managers, designers, and other engineers to deliver features end-to-end.
- Configure and customize modules including Splunk, Microsoft Sentinel, CrowdStrike Falcon, Threat Hunting.
- Build integrations using Palo Alto Networks, Carbon Black, Tenable.
- Write clean, well-documented, and testable code following best practices.
- Participate in code reviews, sprint planning, and retrospectives.
- Troubleshoot and resolve SOC & SIEM Operations-related issues and performance bottlenecks.
- Create and maintain technical documentation for all implementations.
- Stay current with the latest SOC & SIEM Operations releases, features, and best practices.
- Mentor junior team members and contribute to knowledge sharing.
Must-Have Qualifications
- 3+ years of hands-on experience with SOC & SIEM Operations.
- Strong understanding of project lifecycle and Agile methodologies.
- Proficiency with Palo Alto Networks, Carbon Black, Tenable, Qualys.
- Experience with RESTful API design and third-party integrations.
- Excellent problem-solving skills and attention to detail.
- Strong written and verbal communication skills in English.
- Experience with version control systems (Git).
- Ability to work independently in a remote-first environment.
Nice-to-Have Skills
- Certifications such as CompTIA Security+, Splunk Core Certified User.
- Experience with Threat Hunting, Incident Response, SOAR Automation.
- Experience with CI/CD pipelines and DevOps practices.
- Familiarity with cloud platforms (AWS, Azure, or GCP).
- Experience mentoring or leading small teams.
- Contributions to open-source projects or technical blogs.
Interview Tips
Technical Assessment
Ask the candidate to walk through a recent SOC & SIEM Operations project. Focus on architecture decisions and trade-offs.
Problem Solving
Give a real-world scenario involving SOC & SIEM Operations and evaluate their debugging approach and logical thinking.
Culture Fit
Assess communication style, timezone flexibility, and experience working with distributed teams.
Code Review
Share a code sample with deliberate issues. See how they identify problems and suggest improvements.
Related Job Description Templates
Skip the JD — Get Matched Instead
Tell us your SOC & SIEM Operations requirements and we'll send pre-vetted profiles with video intros in 24-48 hours.
You're all set!
We'll send matched profiles within 24-48 hours. Check your email for next steps.