Security Engineer

Position Summary

As a Security Engineer within Neptune's Security Operations Center (SOC), you will design, implement, administer, and optimize Neptune's cybersecurity technologies while serving as a technical leader within the SOC.

This role combines security engineering with operational security by supporting incident detection, investigation, response, and remediation while continuously improving Neptune's security capabilities through automation, tool integration, detection engineering, and process enhancement.

The Security Engineer partners closely with SOC Analysts, IT Operations, Infrastructure, Cloud, and Engineering teams to implement and maintain security solutions, tune detections, develop response playbooks, support vulnerability management, and enhance security monitoring across the enterprise — providing advanced technical expertise during cybersecurity incidents and driving continuous improvements to strengthen Neptune's overall security posture.

Responsibilities:

Security Engineering & Tool Administration


* Design, configure, implement, and maintain security platforms including SIEM, EDR/XDR, SOAR, Identity and Access Management (IAM), Data Loss Prevention (DLP), Vulnerability Management, and Cloud Security solutions


* Evaluate, test, and deploy new security technologies, including Proof of Concept (POC) evaluations


* Develop automation and orchestration workflows to improve operational efficiency


* Support cloud security and Zero Trust initiatives across the enterprise

Detection Engineering & Threat Hunting


* Develop and tune security detections, correlation rules, and dashboards to improve threat detection capabilities and reduce false positives


* Perform proactive threat hunting and analyze security telemetry across endpoint, network, identity, cloud, and SIEM platforms


* Identify opportunities to improve detection and response capabilities across the environment


* Monitor emerging threats, vulnerabilities, and industry best practices to inform detection strategy

Incident Response & Investigation


* Provide technical leadership during investigation, containment, eradication, and recovery for complex and escalated security incidents


* Investigate advanced cyber threats and complex security alerts


* Collect and analyze forensic artifacts, logs, and endpoint telemetry during investigations


* Participate in the on-call rotation and provide advanced technical support during critical security incidents


* Support root cause analysis and post-incident reviews

Vulnerability Management & Remediation


* Validate vulnerability findings and coordinate remediation activities with IT Operations, Infrastructure, and Engineering teams


* Implement security controls to address identified risks


* Track and support remediation efforts across the vulnerability management program

Security Operations, Mentorship & Documentation


* Partner with SOC Analysts, ...