Security Operations Engineer

Skeletons, lasers, monster trucks — the Torq brand grabs attention like nothing else in cybersecurity. And we’re growing like crazy, with $140M in Series D funding, 200% employee growth, and 300% revenue growth in 2025. Fueling Torq’s growth are our game changing agentic AI security solutions, backed by a team and culture that makes Torq one of Forbes’ Best Startup Employers in America, and a Business Insider ‘startup to bet your career on’.

Life at Torq is all gas, no brakes. We’re a team of relentless, collaborative go-getters pushing the boundaries of what’s possible for security automation. Every role is an essential driver of Torq’s success as the AI-native autonomous SecOps platform of choice for security teams across the Fortune 500. Excited about our vision and ready to make an impact as we grow? We’d love to see what you can bring to the team.

We are looking for an experienced Security Operations Engineer to join our fast-growing security team and take ownership of our SIEM and SOAR automation efforts. This is a unique opportunity to work at the intersection of security operations, detection engineering, and automation in a modern SaaS and cloud-native environment.

What Will You Do?

• Maintain and enhance detection engineering content across SIEM and automation systems
• Develop new SOAR workflows, automated actions, and response playbooks
• Build and improve SIEM rules, correlations, dashboards, and monitoring capabilities
• Lead investigations and identify security issues through alert analysis and mitigation
• Coordinate incident response activities and communicate clearly with relevant stakeholders
• Provide consultative guidance on best practices in Cloud Security, SIEM, and automation operations
• Collaborate closely with internal teams to understand monitoring needs and deliver new insights
• Follow CISO guidance to continuously improve the organization’s security posture
• Design, document, and scale security automation capabilities
• Review new product features, implement security standards, and share knowledge across the team
  
  

• Strong communication skills and ability to work effectively in a fast-paced startup environment
• Minimum of 4 years of experience as a Security Operations Engineer
• Experience working in a SaaS and cloud-based environment
• Hands-on experience with SOAR platforms or other security automation tools
• Hands-on experience with SIEM platforms (Splunk is a bonus)
• Strong understanding of the SIEM/SOAR alert lifecycle from event to response
• Experience handling and managing security alerts and investigations
• Familiarity with REST APIs and Regex
• Strong knowledge of security technologies such as Cloud Security, EDR, Vulnerability Scanning, Secure Access, and MDM
• Proven experience working across cloud providers (AWS, GCP, Azure)
• Scripting experience with Python or Bash
• A proactive, independent, and curious mindset with a desire to learn and grow