Security Operations Engineer Job at MASTERY SYSTEMS, Lake Forest, IL

  • MASTERY SYSTEMS
  • Lake Forest, IL

Job Description

ABOUT THE ROLE"You'll build the detections that catch what alerts alone would miss, and the automation that keeps a lean team ahead of the threats."As a Security Operations Engineer on Mastery's Information Security team, you'll own detection engineering and SOAR automation for MasterMind, our Azure-native transportation management platform. You'll design and tune the analytics rules running in Microsoft Sentinel, build automated response workflows that cut manual triage time, and close visibility gaps across our AKS, endpoint, and network telemetry as we bring new log sources online.This role is ideal for a deeply technical engineer who wants to build and ship detections and automation — not manage people or run the team's day-to-day. If you'd rather spend the day in KQL and automation workflows than in a status meeting, this is built for you.WHAT YOU'LL OWNDetection EngineeringBuild real detections: design, write, and tune analytics rules and correlation logic in Microsoft Sentinel, aligned to MITRE ATT&CK.Close the gaps: identify and close visibility blind spots across our infrastructure and telemetry as new log sources come online.Reduce the noise: continuously validate and refine detections to cut false positives without losing real signal.Automation & ResponseAutomate the busywork: design and build SOAR playbooks and workflows that automate triage, enrichment, and response, freeing the analyst team to focus on real investigations.Integrate the stack: build and maintain integrations across Sentinel, Defender, and other security tooling via APIs and scripting.Technical Depth & Threat ContextTranslate intel into detections: turn emerging threats and adversary TTPs into actionable, tuned detection logic.Stay hands-on: keep pace with evolving attacker techniques and Sentinel/SOAR platform capabilities through direct, ongoing technical work.WHAT YOU BRINGExperience4+ years in security operations, detection engineering, or a closely related technical security role.Demonstrated, hands-on experience building or substantially tuning detection rules and correlation logic in a SIEM (Sentinel strongly preferred).Experience building SOAR playbooks or comparable security automation workflows.Skills & ApproachDeep query language fluency: comfortable writing and debugging complex KQL (or equivalent SIEM query language) without hand-holding.Scripting and API proficiency: Python or PowerShell for automation, with experience integrating tools via REST APIs.Self-directed technical focus: prefers to own and ship technical work independently over managing people or processes.Nice to HaveExperience in an Azure/AKS or other Kubernetes-based cloud environment.Experience supporting SOC 2 or similar compliance audits from a technical evidence standpoint.Familiarity with Sentinel Logic Apps or another SOAR automation platform.HOW YOU'LL KNOW YOU'RE SUCCEEDINGDetection coverage measurably improves: new log sources come online with real, tuned detections behind them, not just raw ingestion.False positive rates drop: the analyst team trusts what fires in the queue instead of triaging noise.Manual triage time shrinks: SOAR playbooks handle the repeatable work so the team's time goes to real investigations.ABOUT MASTERYMost TMS platforms are tolerated. We've proven a better way — one platform built for every facet of transportation: shippers, carriers, private fleets, and brokers, all under one roof. Built to be loved. We're still the only ones who mean that.Mastery Logistics Systems exists because the transportation industry deserves better. For too long, shippers and carriers have been forced to stitch together a patchwork of outdated, inadequate systems — one for dedicated fleet, another for brokerage, another for LTL, another for intermodal — none of them talking to each other, all of them slowing things down. Mastermind TMS changes that: one platform for every mode, every function, every stakeholder. Flexibility, visibility, and control — finally in one place.The timing matters. Global supply chains are under pressure like never before, and the transportation industry is at the center of it. We're building the platform that helps this industry move faster, smarter, and more efficiently — tackling everything from AI-powered data ingestion to intelligent automation.We are a masterful mosaic of specialists, builders, and genuinely good people. Different backgrounds, different talents, one shared obsession: creating something the industry has never had. We believe in diversity of thought, deep respect for each other, and the relentless pursuit of getting it right. We're small enough that every person makes a real impact — technically and culturally — and deliberate enough that we only add people who make the whole better.If you're passionate about humanizing a complex industry, building for scale, and touching every corner of the global economy — welcome home. Let's build a masterpiece.BENEFITS — BECAUSE YOU SHOULD LOVE WHERE YOU WORK AND HOW YOU'RE TAKEN CARE OFWe don't do "bare minimum" here — not in the product, not in the culture, and definitely not in how we take care of our people. Mastery's benefit package is built to give you real coverage, real flexibility, and real peace of mind.ð Medical, Dental & VisionComprehensive health coverage so you can focus on the work, not the what-ifs.ð¡️ Life & AD&D InsuranceCompany-paid life insurance at 1 your salary, plus AD&D and additional voluntary coverage options.️ Legal & Employee AssistanceLegal assistance and employee support programs — for life's messier moments, big and small.ð 401(k) with 4% MatchWe invest in the platform and in your future. Save for retirement with a competitive company match.ð️ Flexible PTOManage your life and your schedule. We trust you to do great work and take the time you need to recharge.️ Giving Back — St. Jude Children's Research HospitalOur philanthropic partner is St. Jude Children's Research Hospital. Because doing good work and doing good in the world aren't mutually exclusive.Robust benefits. Real flexibility. A team that has your back. That's the Mastery standard.

Job Tags

Flexible hours

Similar Jobs

Top Dental Huntington Park

Dental assistant Job at Top Dental Huntington Park

 ...Part-Time Registered Dental Assistant (RDA) Needed in Huntington Park, CA | $28$32/hr # Excellent Part-Time Opportunity in Huntington Park Top Dental is hiring a Registered Dental Assistant (RDA) for 2 days per week within our regular office hours of 9:00 AM6:00... 

TRIANGLE SOURCING LLC DBA LONGISTICS

CDL OTR Team Drivers Job at TRIANGLE SOURCING LLC DBA LONGISTICS

 ...Requirements Must Be Willing To Team Job Description: CDL A TEAM DRIVERS - Can Easily Average $4,000 PER WEEK! $10,000 SOB TO THE TEAM...  ...time at home! We are planning to stay with Longistics until we retire..." " Lisa and John Scott, Four Million Mile Safe Drivers,... 

PBS Facility Services

Armed Security Guard Job at PBS Facility Services

 ...Armed Security Guard PositionThe daily duties of an armed guard in a residential setting focus on protecting lives and property while maintaining...  ...:Resident Assistance: Walking residents to their vehicles at night or assisting with emergency lockouts.Package Management: In... 

Community Residences

Residential Instructor Job at Community Residences

Job Description Job Description # Create a nurturing, positive learning environment and develop strategies to help the clients cope effectively with social, emotional and physical situations of daily living and facilitate independent performance in these areas. ...

Advantage TeleMessaging, Inc.

Bilingual (English/Spanish) Remote Customer Service Representative / Answering Service Agent - Earn Up to $17/hr Job at Advantage TeleMessaging, Inc.

 ...VIRGINIA OR WEST VIRGINIA Why People Enjoy Working At Advantage TeleMessaging, Inc....  ...pay with direct deposit Work-from-home convenience Supportive team environment...  ...English and Spanish to join our remote answering service team. Your bilingual skills will help...