Senior SOC Engineer - Remote Work | REF

At BairesDev®, we've been leading the way in technology projects for over 15 years. We deliver cutting-edge solutions to giants like Google and the most innovative startups in Silicon Valley.

Our diverse 4,000+ team, composed of the world's Top 1% of tech talent, works remotely on roles that drive significant impact worldwide.

When you apply for this position, you're taking the first step in a process that goes beyond the ordinary. We aim to align your passions and skills with our vacancies, setting you on a path to exceptional career development and success.

Senior SOC Engineer at BairesDev

In this role, you'll act as a trusted advisor to enterprise customers post-purchase, not a SOC analyst watching dashboards. Your day-to-day includes product SME support, troubleshooting critical issues, writing scripts, training customers, and driving ROI and value realization on their security investment. This is your opportunity to combine deep security operations expertise with genuine customer-facing skills, explaining complex security concepts clearly while helping enterprise customers get real value from their security infrastructure.

What You'll Do

• Serve as a trusted advisor and product SME for enterprise customers using a converged XDR/SIEM/SOAR platform.
• Troubleshoot critical customer issues, applying detection, triage, and incident response expertise.
• Write scripts and build custom integrations to support and automate customer workflows.
• Train customers and create knowledge base articles and guides that drive product adoption.
• Help customers realize ROI and ongoing value from their security platform investment.
  
  

What We Are Looking For

• 5+ years of experience in Security Operations environments, including detection, triage, incident response, automation, and security tool administration.
• Background with SIEM/SOAR/XDR platforms such as Splunk, Sentinel, QRadar, CrowdStrike Falcon, or equivalent.
• Strong XDR/EDR experience, with Cortex XDR preferred; CrowdStrike, SentinelOne, Carbon Black, or Microsoft Defender XDR also acceptable, covering endpoint detection, investigation workflows, alert triage, and response automation.
• Practical, hands-on scripting ability in Python and/or JavaScript for automating workflows and building custom integrations and tooling.
• Linux system administration and troubleshooting experience in production environments.
• Cloud security awareness across GCP, AWS, or Azure.
• Genuine customer-facing experience, with strong communication skills and the ability to explain complex security concepts clearly to non-technical stakeholders.
• Advanced proficiency in English.
  
  

Nice To Have

• Direct experience with Cortex XSIAM.
• Experience with SOAR/playbook development such as XSOAR or Phantom.
• Background in enterprise network security fundamentals, including NGFW, PAN-OS, Panorama, firewall policy, VPN, or IDS/IPS.
• Experience creating technical content such as knowledge base articles, customer guides, or troubleshooting documentation.
• PCNSA, PCNSE, or equivalent Palo Alto certification.
• Proficiency in Spanish and/or Portuguese.
  
  

How we do make your work (and your life) easier:

• 100% remote work (from anywhere).
• Excellent compensation in USD or your local currency if preferred
• Hardware and software setup for you to work from home.
• Flexible hours: create your own schedule.
• Paid parental leaves, vacations, and national holidays.
• Innovative and multicultural work environment: collaborate and learn from the global Top 1% of talent.
• Supportive environment with mentorship, promotions, skill development, and diverse growth opportunities.
  
  

Join a global team where your unique talents can truly thrive and make a significant impact!

Apply now!

#BD-PRIO-2026