Lead SOC Engineer at OnTrac

Job description

OnTrac is hiring a Lead SOC Engineer! Are you eager to join a dynamic and expanding company where you can both learn and make a meaningful impact? If you possess a strong sense of empathy, enjoy assisting others, thrive in a fast-paced environment, and excel at problem-solving, we encourage you to apply today to connect with a recruiter! Founded in 1986, OnTrac has evolved into the leading provider of same-day and next-day delivery services in the U.S. for premier e-commerce and product-supply businesses, including five of the largest retailers in the U.S. Location: Remote - This position may be performed remotely in states where the company is authorized to employ individuals. Compensation: The expected starting base pay range for this position is $156,000 - $195,000, with full potential base salary range over a successful candidate’s tenure in the position of $156,000 - $234,000. Actual compensation will be determined based on experience, skills, internal equity, and other job-related factors. Employment Logistics: We are seeking a Lead Cyber Security Engineer, a senior-level individual contributor responsible for designing, building, and maintaining robust security architectures. This is a "hands-on-keyboard" role that requires the ability to pivot between deep technical engineering and assisting in strategic support. You will act as a primary technical enabler for the Security Operations Center (SOC) by optimizing detection capabilities and for the Governance, Risk, and Compliance (GRC) team by translating complex regulatory requirements into technical controls and automated evidence collection. Unpacking the Benefits: Employees are eligible for a comprehensive benefits package which may include: Medical, dental, and vision insurance Life and short- and long-term disability coverage 401(k) retirement savings plan with company match Flex vacation in states other than CA, CO, IL, MA, MT, and NE, with accruals up to 96 hours for first year of employment with tenure-based increases up to 160 hours Two (2) floating holidays per year Paid sick leave* Six (6) paid company holidays Two (2) weeks paid pregnancy disability leave, four (4) weeks paid parental bonding leave Additional wellness and employee assistance programs Benefits eligibility and offerings are subject to the terms and conditions of the applicable plans and company policies. The Must-Haves: Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field (or equivalent practical experience). 10 years of progressive experience in IT and Security, at least 3 years in a senior or lead engineering capacity. CISSP, CISM, or hands-on technical certifications like GIAC (GCIA, GCDA) or Offensive Security (OSCP) are strongly preferred. Must demonstrate a "Generalist" Mindset, proficient across multiple domains, including network security (firewalls, Zero Trust), endpoint protection, and cloud security (AWS/GCP). Scripting & Automation experience with a strong ability to code/script in Python, PowerShell, or Bash to automate repetitive security tasks and integrations. OC/Threat Hunting Tech experience and a deep understanding of SIEM logic, YARA rules, and EDR configuration to improve detection efficacy. GRC Fluency and the ability to interpret frameworks such as NIST CSF, ISO 27001, or SOC2 and implement the technical controls required to meet them. The unique ability to explain deep technical vulnerabilities to non-technical risk stakeholders and vice-versa. Your Mission in Motion: A summary of key responsibilities for the role is outlined below. Additional duties may be assigned as needed to support business objectives. Cross-Functional Enablement: Design and implement technical solutions that assist the SOC in alert orchestration (SOAR) and provide the GRC team with automated risk monitoring tools. Security Integration: Lead the integration of disparate security tools (EDR, SIEM, Cloud Security) to ensure a unified and visible security posture. Risk Management Support: Assist in technical risk assessments, identifying vulnerabilities within the infrastructure, and recommending/implementing remediation engineering. Architecture & Engineering: Develop and maintain security infrastructure in hybrid environments (on-prem/cloud), ensuring "security by design" is applied to all new deployments. Incident Response Escalation: Serve as a Tier 3 technical escalation point for complex security incidents requiring deep forensic or architectural expertise. Mentorship: Guide junior engineers and analysts, fostering a culture of technical excellence and proactive security. Paving your way to your success: You demonstrate extensive and diverse experience, applying deep professional knowledge, insight, and alignment with company objectives to develop and resolve complex models and procedures. You deliver innovative and effective solutions to challenging issues with a strong understanding of the interconnections among various disciplines. You build and nurture networks with key stakeholders beyond your own area of expertise. You adapt communication style and employ persuasive skills to convey messages aligned with broader business objectives. You frequently provide guidance on complex issues and may hold accountability for achieving tactical business targets. Disclosures: *Washington state employees are eligible for up to 56 hours of paid sick leave annually.  The hourly rate range above represents the national range for this position. The hourly rate range may be inclusive of several career levels at OnTrac, and the actual base hourly rate offered may vary depending on several factors including, but not limited to: geographic location, candidate experience and qualifications, job-related skills and competencies, market alignment, and financial considerations.   Compensation decisions are made based on the specific circumstances of each hire to ensure fair and competitive pay.  This job posting is anticipated to remain open for at least 30 days from the date of posting. If you are excited to be part of our team and grow with our OnTrac family, we invite you to apply! OnTrac is proud to be an Equal Opportunity Employer Lasership, Inc. dba OnTrac Final Mile with its affiliates, including OnTrac Logistics, Inc. (collectively, "OnTrac" or the "Company") is an equal opportunity employer. We value diversity and welcome applications from individuals of all backgrounds, abilities, and experiences. We do not discriminate based on race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or age. Join us in our commitment to creating a diverse and inclusive workplace. If you are excited to be part of our team and contribute to our talent acquisition efforts, we invite you to apply.

Requirements

Must-haves

OnTrac is hiring a Lead SOC Engineer!
Remote - This position may be performed remotely in states where the company is authorized to employ individuals.
Employees are eligible for a comprehensive benefits package which may include:
Life and short- and long-term disability coverage
Flex vacation in states other than CA, CO, IL, MA, MT, and NE, with accruals up to 96 hours for first year of employment with tenure-based increases up to 160 hours
Two (2) floating holidays per year
Paid sick leave*
Two (2) weeks paid pregnancy disability leave, four (4) weeks paid parental bonding leave
Benefits eligibility and offerings are subject to the terms and conditions of the applicable plans and company policies.
Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field (or equivalent practical experience).
10 years of progressive experience in IT and Security, at least 3 years in a senior or lead engineering capacity.
Must demonstrate a "Generalist" Mindset, proficient across multiple domains, including network security (firewalls, Zero Trust), endpoint protection, and cloud security (AWS/GCP).
Scripting & Automation experience with a strong ability to code/script in Python, PowerShell, or Bash to automate repetitive security tasks and integrations.
OC/Threat Hunting Tech experience and a deep understanding of SIEM logic, YARA rules, and EDR configuration to improve detection efficacy.
GRC Fluency and the ability to interpret frameworks such as NIST CSF, ISO 27001, or SOC2 and implement the technical controls required to meet them.
The unique ability to explain deep technical vulnerabilities to non-technical risk stakeholders and vice-versa.
A summary of key responsibilities for the role is outlined below. Additional duties may be assigned as needed to support business objectives.
Cross-Functional Enablement: Design and implement technical solutions that assist the SOC in alert orchestration (SOAR) and provide the GRC team with automated risk monitoring tools.
Security Integration: Lead the integration of disparate security tools (EDR, SIEM, Cloud Security) to ensure a unified and visible security posture.
Risk Management Support: Assist in technical risk assessments, identifying vulnerabilities within the infrastructure, and recommending/implementing remediation engineering.
Architecture & Engineering: Develop and maintain security infrastructure in hybrid environments (on-prem/cloud), ensuring "security by design" is applied to all new deployments.
Incident Response Escalation: Serve as a Tier 3 technical escalation point for complex security incidents requiring deep forensic or architectural expertise.
Mentorship: Guide junior engineers and analysts, fostering a culture of technical excellence and proactive security.

Nice-to-haves

CISSP, CISM, or hands-on technical certifications like GIAC (GCIA, GCDA) or Offensive Security (OSCP) are strongly preferred.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awsgcppython

Platform: dayforce
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Wellness