Vancord is seeking a Senior Security Engineer to serve as our SOC Lead. This is primarily a leadership position within the Security Operations Center; in addition, it is a role that safeguards our customers, protects our reputation, and upholds the trust that countless organizations place in Vancord every single day.
This person will balance technical depth and client success. You will guide our security analyst team, help engineer our detection strategies, shape our response posture, and represent the very best of Vancord’s operational security excellence.
Key Responsibilities
Refine and maintain detection and response workflows in tools such as Elastic Security, Microsoft Defender XDR, Microsoft Sentinel, CrowdStrike Falcon, and Torq (SOAR).
Represent the SOC internally and externally, championing best practices, emerging threats, and the importance of strong telemetry hygiene.
Present SOC metrics, incident summaries, and operational improvements to customers in a clear, executive-ready format.
Required Qualifications
Strong knowledge of SIEM, EDR, SOAR, and security telemetry (Elastic, Sentinel, Defender, CrowdStrike, SentinelOne, etc.).
Preferred Qualifications
Advanced Detection & Telemetry Engineering: Expertise designing large-scale detection architectures, authoring advanced correlation logic, building ECS-aligned pipelines, and operating SIEM/EDR platforms such as Elastic, Defender, Sentinel, and CrowdStrike.
Automation & Tooling Mastery: Proven ability to engineer SOC automation through SOAR platforms and Python-based tooling, including enrichment pipelines, ETL workflows, and data-stream integrations that measurably reduce manual workload and MTTR.
Threat Intelligence, Threat Hunting & Incident Command: Deep experience conducting structured hunts, developing threat intelligence-driven detections, and leading major incident response events with clear executive communication and real-time decision making.
Security Architecture & MSSP/MDR Experience: Strong understanding of cloud, endpoint, and identity telemetry; experience operating in high-velocity MSSP/MDR environments; and familiarity with SOC2/ISO/NIST frameworks, customer communications, and operational maturity programs.
Company Description
About Vancord
Founded in 2005, Vancord is a full-service Managed Service and Cyber Security Provider headquartered in the Northeastern United States. Vancord successfully combines the power of execution, strategy, and partnership to deliver multi-faceted Information Technology and Cyber Security services to our valued customers. We build strong partnerships with startups, manufacturers, higher education, state and municipal governments, and other diverse organizations.