Senior Security Operations Engineer Jobs
Senior Security Operations Engineer jobs are open across financial services, healthcare, technology, defense contracting, and managed security services, from mid-level analyst to principal and staff engineer, with specializations in threat detection, incident response, and SIEM engineering. Find a role that fits from the openings below and apply directly.
Find JobsLooking for remote work? View remote senior security operations engineer jobs →Overview
Showing 5 of 69+ Senior Security Operations Engineer jobs











Oracle's Global Physical Security (GPS) Operations Team secures the corporation's data center and facility footprint through physical access, video monitoring, alarm management, incident response, and coordinated operational controls. The Physical Security Operations Analyst is the on-site IC4 owner for the Shackelford, TX local SOC operating model.
This role is not a people-manager position. It leads the SOC function: establishing reliable procedures, ensuring local operators and contracted personnel can execute them, coordinating with the Global Security Operations Center (GSOC) and site partners, and resolving the systems, process, documentation, training, and escalation gaps that affect monitoring and response.
The role operates with substantial independence and is accountable for operational readiness, consistent incident handling, clear handoffs, and measurable improvement across the local SOC environment.
This is an on-site role in our Santa Teresa, NM location.
Own the local SOC operating model for Shackelford, including alarm monitoring, camera verification, dispatch coordination, incident logging, shift handoffs, and escalation paths.
Translate GSOC SOPs, Alarm Master Matrix requirements, site post orders, and local operating needs into usable runbooks, job aids, and response workflows.
Standardize the investigation, documentation, and escalation of alarms and incidents so actions are timely, consistent, and traceable across shifts.
Maintain local readiness for Lenel access-control alarms, Milestone video monitoring and retrieval, communication tools, and documented degraded-mode procedures when systems or connectivity are impaired.
Coordinate with GSOC, Security Systems, Data Center Operations, construction, guard force leadership, IT/network teams, and vendors to diagnose monitoring gaps, restore service, and close recurring break/fix issues.
Support construction-to-operations transitions by validating monitoring coverage, alarm visibility, camera readiness, access-control changes, commissioning activity, and operational handoffs before sites or systems enter service.
Develop and maintain practical training plans, access readiness, and competency checks for SOC operators and contracted staff; provide functional guidance without assuming direct personnel-management authority.
Analyze alarm, incident, outage, response-time, and quality data; establish meaningful performance measures and recommend corrective actions, preventive controls, and process improvements.
Maintain audit-ready SOC documentation, including shift logs, incident records, escalation guides, operating procedures, training materials, outage playbooks, and after-action follow-up.
Serve as the local functional escalation point for SOC process and systems issues, escalating material risk, critical incidents, and unresolved service failures through the defined GPS and GSOC paths.
Support GPS Investigations by preserving, locating, and documenting relevant video, alarm, and access-control information for review of suspicious activity or incidents.
Scope, Judgment, and Collaboration
Works independently on significant operational issues where sound judgment is required to assess risk, define an appropriate response, and coordinate action across multiple teams.
May direct day-to-day functional work, training, and adherence to approved procedures for contracted SOC operators and technicians; does not have direct reports or responsibility for personnel actions.
Builds effective working relationships with GSOC, Security Systems, Data Center Operations, investigations, construction, IT/network teams, vendors, and guard-force partners.
- Escalates decisions outside the role's authority, including staffing, contractual matters, enterprise standards, and high-consequence incidents, to the appropriate GPS leader or GSOC partner.
Qualifications
Seven or more years of relevant experience in physical security operations, a security operations center, local alarm center, control room, or enterprise physical-security technology environment.
Hands-on experience with access-control, video-management, alarm-monitoring, and incident-management workflows; Lenel and Milestone experience strongly preferred.
Demonstrated ability to create, improve, and use operational runbooks, alarm response procedures, escalation guides, shift-handoff standards, and training materials.
Experience diagnosing or coordinating resolution of monitoring, camera, access-control, network, or system-integration issues in a live operational environment.
Strong incident documentation, analytical, communication, vendor-coordination, and cross-functional project skills.
Ability to work on-site in Shackelford, Texas and support a 24/7 operational environment, including response to significant incidents or system outages when required.
Preferred Qualifications
Experience supporting data center physical security operations, construction-to-operations transitions, or high-availability environments.
Experience with PSIM platforms, alarm/event automation, ticketing integration, analytics, or reporting/KPI development.
Familiarity with incident documentation and control expectations in regulated or audit-sensitive environments, including SOC 2, PCI DSS, ISO 27001, or equivalent.
Bachelor's degree in security, criminal justice, engineering, information systems, or a related discipline; equivalent experience will be considered.
Success Measures
Consistent alarm verification, dispatch, documentation, and escalation across shifts.
Current, usable runbooks, training records, shift-handoff standards, and degraded-mode procedures.
Improved visibility into system outages, camera/access-control issues, response performance, and recurring operational risks.
Reliable coordination and clear local-to-GSOC handoffs during incidents, outages, and operational transitions.
#LI-CG2
Senior Security Operations Engineer Jobs by Experience Level
See All 69 Senior Security Operations Engineer Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsSenior Security Operations Engineer Job Market
Who's Hiring


Top Industries Hiring
- Technology & Software
- Banking & Financial Services
- Electronics & Hardware
- Healthcare & Medical Services
- Consulting & Professional Services
What Employers Look For
The qualifications that appear most often in senior security operations engineer jobs.
- Five or more years of hands-on experience in security operations or incident response roles
- Proficiency with SIEM platforms such as Splunk, Microsoft Sentinel, or IBM QRadar
- Experience with endpoint detection and response tools like CrowdStrike Falcon or SentinelOne
- CISSP, GIAC GCED, GCIA, or equivalent industry certification strongly preferred
- Ability to develop and tune detection rules, correlation logic, and alerting thresholds
- Bachelor's degree in computer science, cybersecurity, information systems, or a related field
Tips for Your Senior Security Operations Engineer Job Search
Align your resume to detection engineering
Recruiters for senior security operations engineers scan for hands-on SIEM work, not just familiarity. Lead each bullet with the platform you used, the detection logic you wrote, and what threat category it covered. Generic SOC experience without specifics gets filtered fast.
Certify before you apply at scale
CISSP, GIAC GCED, and GCIA appear in a large share of senior-level postings. If you hold one, put it above the skills section. If you're mid-certification, note the expected completion date so hiring managers don't overlook your application.
Target listings by SIEM stack not just title
Job titles vary wildly across organizations. Search for the tools you know best, such as Splunk, Microsoft Sentinel, or CrowdStrike, alongside the role title. You'll surface relevant openings that use different seniority labels but need exactly your skill set.
Apply early to roles that fit
Migrate Mate lists senior security operations engineer openings from across the United States in one place, so you can find roles that match and apply directly to each listing.
Prepare a live incident scenario walkthrough
Most senior SOC interviews include a tabletop or scenario exercise. Practice walking through a ransomware or credential-compromise incident end-to-end: detection, triage, containment, and post-incident review. Interviewers want to see how you structure your thinking under pressure.
Negotiate scope alongside compensation
Before accepting any offer, clarify what you own: on-call rotation frequency, escalation authority, and whether you lead junior analysts. Scope creep is common in security operations roles, and getting these boundaries in writing protects your workload and career trajectory.
Senior Security Operations Engineer Jobs: Frequently Asked Questions
Which companies are hiring the most senior security operations engineers?
The companies hiring the most senior security operations engineers right now include Planned Parenthood of Greater Texas, Brex, and Amazon, with the largest share of openings in California, Texas, and Illinois, based on current listings on Migrate Mate as of August 2026. Financial services, defense contractors, and managed security service providers consistently post the highest volume of senior-level roles.
How many senior security operations engineer jobs are remote?
About 63% of senior security operations engineer openings are fully remote or hybrid as of August 2026, making it one of the more flexible senior technical roles in cybersecurity. Detection engineering, threat intelligence, and SIEM administration sub-specializations tend to have the highest remote availability, while roles requiring on-site lab access or government clearance are more likely to require in-person work.
How do you become a senior security operations engineer?
Start by building hands-on experience in a SOC analyst or incident responder role, then move into more complex detection and response work. Earn recognized certifications such as CISSP or GIAC GCED to signal depth. Develop proficiency in at least one enterprise SIEM platform, practice writing detection logic, and take on mentorship or project leadership to demonstrate the senior-level scope employers expect.
Can you get hired as a senior security operations engineer with limited experience?
Breaking in at the senior level with limited direct experience is difficult, but a strong portfolio of home-lab detection projects, open-source threat-hunting contributions, or documented incident response work from adjacent roles can close the gap. Targeting companies that promote from within or that value certifications heavily over years-of-service requirements gives you the best opening when your resume is thin on senior titles.
What does the senior security operations engineer interview process look like?
Most hiring processes include an initial recruiter screen, a technical phone interview covering threat detection methodology and tooling, and a multi-stage panel with security engineers and a hiring manager. A live tabletop exercise or take-home detection scenario is common at the senior level. Some employers add a behavioral round focused on cross-team communication and incident leadership before extending an offer.
Where can I find and apply to senior security operations engineer jobs?
You can find and apply to senior security operations engineer jobs on Migrate Mate, which lists current openings from across the United States. Find roles that match your experience and specialization, then apply directly to each listing without leaving the platform.
See All 69 Senior Security Operations Engineer Jobs
Find roles that match your experience and apply in just a few clicks.
Find Jobs