Lead SOC Engineer

The role

You will lead threat detection and response across cloud-native infrastructure and build a small team. Responsibilities include writing detections as code, engineering logging pipelines, and automating response via SOAR and Python/Terraform.

What you will do

• Build and tune detection logic across AWS, Kubernetes, identity, and endpoints
• Engineer logging pipelines and maintain telemetry collection
• Automate response work using SOAR playbooks and Python/Terraform
• Lead incidents from triage through investigation, containment, and recovery
• Conduct hands-on threat hunts
• Coach early-career analysts
• Own a practical 6–12 month SOC roadmap
• Track operational measures like MTTD/MTTR and detection coverage
• Translate security findings into engineering-actionable remediation tasks
• Broker between government customer compliance officers and platform engineers

Required qualifications

• 7+ years of hands-on experience in security operations, detection engineering, incident response, or cloud security engineering
• Demonstrated technical leadership or senior individual contributor role mentoring others
• Hands-on depth with a SIEM and EDR
• Strong AWS security fundamentals including CloudTrail, GuardDuty, IAM, and VPC flow logs
• Working scripting and automation skills in Python and infrastructure-as-code with Terraform
• Experience with SOAR or similar automation platforms
• Real incident response experience leading incidents end to end
• Clear, direct communication
• U.S. citizenship is required

Nice to have

• A proactive and solutions oriented mindset
• Viewing obstacles as opportunities for growth
• Having a bias toward action and tangible, measurable results
• Being team-oriented with a focus on personal responsibility and autonomy

Benefits

• 100% employer-paid medical, dental, and vision coverage for you and your dependents
• 401(k) with a 3% company contribution
• Comprehensive wellness benefits including One Medical membership, mental health resources, and family planning support
• Equity incentive plan
• New hire technology and home office stipend
• Annual professional development stipend
• Flexible paid time off, plus all federal holidays
• Generous parental leave
• Flexible remote work opportunities
• Employee referral bonus program

Before you apply

• Candidates must reside in DC/Maryland/Virginia or Denver/Colorado Springs, CO
• U.S. citizenship is required

About the company

Second Front Systems (2F) is a public-benefit software company powering software for the free world. They eliminate friction in software development and deployment across government and regulated networks.