Security Operations Platform EngineerFounded over 35 years ago, First Quality is a family-owned company that has grown from a small business in McElhattan, Pennsylvania into a group of companies, employing over 5,000 team members, while maintaining our family values and entrepreneurial spirit. With corporate offices in New York and Pennsylvania and 8 manufacturing campuses across the U.S. and Canada, the companies within the First Quality group produce high-quality personal care and household products for large retailers and healthcare organizations.
Our personal care and household product portfolio includes baby diapers, wipes, feminine pads, paper towels, bath tissue, adult incontinence products, laundry detergents, fabric finishers, and dishwash solutions. In addition, we manufacture certain raw materials and components used in the manufacturing of these products, including flexible print and packaging solutions.Guided by our values of humility, unity, and integrity, we leverage advanced technology and innovation to drive growth and create new opportunities. At First Quality, you'll find a collaborative environment focused on continuous learning, professional development, and our mission to Make Things Better®.We are seeking a Security Operations Platform Engineer for our First Quality Enterprises, LLC company, working remotely.
The Information Security team is actively seeking a platform engineer to join our SOC operations to support the design, implementation, management, and optimization of our SIEM/SOAR platform. This role ensures effective log ingestion, threat detection, alert tuning, reporting, automation, and overall platform health to enhance the organization's security monitoring and incident response capabilities.Primary responsibilities include:Platform Management Configure and maintain SIEM/SOAR platformMonitor platform performance, availability, and data healthReview and maintain upgrades, integrations, and ongoing optimizationManage role/scope-based access controls and data retention policiesData Ingestion & Integration Onboard and normalize log sources (firewalls, endpoints, servers, cloud, SaaS, identity providers, etc.)Build integrations via scripting for custom data onboarding utilizing APIsTroubleshoot ingestion issues and ensure log integrity and completenessReview and maintain parsing rules and data mappingsOptimize data pipelines for performance and cost efficiencySOC Operations Support Develop, tune, and maintain detection rules logic, and alerting thresholds to improve fidelity and reduce false positivesCollaborate with SOC analysts during active investigations to provide platform support, log extraction, and forensic data retrievalVendor management and escalation supportReporting & Dashboards Build and maintain dashboards for SOC operations, compliance, and executive reportingDevelop and maintain scheduled and ad-hoc reports for stakeholdersDevelop KPIs and metrics for security posture and incident trendsContinuous Improvement Evaluate new log sources and security integrationsRecommend enhancements to improve visibility and coverageStay current on platform updates and best practicesEvaluate existing integrations and data to improve parsing, data normalization, and data reductionThe ideal candidate should possess the following:Bachelor's degree in Cybersecurity, Information Technology, or related field (or equivalent experience)3+ years of experience managing a SIEM platformKnowledge of network protocols, firewalls, IDS/IPS, EDR, cloud security logsUnderstanding of data normalization standards (CEF, LEEF, JSON, etc.)Experience with SIEM query languagesExperience with scripting (Python, PowerShell, or similar) for automationWorking knowledge of MITRE ATT&CK, threat intelligence, and incident response processesPreferred: 3+ years managing SOAR platformPreferred: Experience developing automation, and response playbooksPreferred: Familiarity with Azure, AWS, or GCP log configurationsPreferred: Experience supporting compliance frameworks (NIST, ISO 27001, SOX, HIPAA, etc.)Preferred: Security+, CySA+, CASP+, GCIA, GCIH, CISSP or equivalentAnalytical and problem-solving skillsStrong troubleshooting and log analysis capabilitiesAbility to translate security requirements into technical solutionsStrong communication skills for technical and executive audiencesAbility to work both independently and collaboratively in a fast-paced SOC environmentTravel up to 5 days per yearWhat We Offer YouWe believe that by continuously improving the quality of our benefits, we can help to raise the quality of life for our team members and their families. At First Quality you will receive:Competitive base salary and bonus opportunitiesPaid time off (three-week minimum)Medical, dental and vision starting day one401(k) with employer matchPaid parental leaveChild and family care assistance (dependent care FSA with employer match up to $2500)Bundle of joy benefit (years' worth of free diapers to all team members with a new baby)Tuition assistanceWellness program with savings of up to $4,000 per year on insurance premiums...and more!First Quality is committed to protecting information under the care of First Quality Enterprises commensurate with leading industry standards and applicable regulations.
As such, First Quality provides at least annual training regarding data privacy and security to employees who, as a result of their role specifications, may come in to contact with sensitive data.First Quality is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, sexual orientation, gender identification, or protected Veteran status.