GuidePoint Security
SecOps Engineer - North Central region (Remote in the U.S.)
About this role
GuidePoint Security seeks a SecOps Engineer to implement, optimize, and operationally support SIEM platforms, detection engineering, and security telemetry for Fortune 500 and government clients. Working within a consulting delivery model across the North Central region, you'll execute hands-on technical activities including log onboarding, data normalization, detection rule development, and SOC optimization under senior engineering guidance.
What you'll do
- Configure and validate security telemetry ingestion into SIEM platforms using agents, APIs, syslog, and native integrations
- Implement data parsing, field extraction, and normalization into standardized schemas (CIM, ECS, UDM)
- Develop, tune, and validate detection rules mapped to MITRE ATT&CK frameworks while reducing false positives
- Monitor data pipelines, troubleshoot ingestion and performance issues, and ensure data quality assurance
- Support SOAR playbook development and automation between SIEM, endpoint, and third-party tools
- Contribute to architecture assessments, platform optimization, and continuous improvement initiatives
What they're looking for
- SIEM platform administration and configuration
- Data parsing and extraction (regex, JSON, key-value)
- Detection engineering and rule development
- MITRE ATT&CK framework mapping
- Data normalization and schema implementation
- SOAR platform integration and playbook development
- Troubleshooting and root cause analysis
- Security telemetry and log analysis
Opens the application — the Jobs AI extension fills it for you. Set up autofill
Opens the official application on the employer’s site. No login required.
GuidePoint Security
GuidePoint Security builds and deploys security infrastructure and automation solutions for federal government, intelligence community, and enterprise clients. The company is hiring for specialized security engineering roles including cloud security architects, network security engineers, Linux automation specialists, and security operations professionals with expertise in platforms like Splunk, Zscaler, and firewall technologies.
View all jobs at GuidePoint SecurityLikely interview questions
- Describe your experience with SIEM platforms—which ones have you worked with, and what onboarding tasks have you handled?
- Walk us through how you've handled data normalization challenges when integrating disparate log sources into a centralized schema.