A security operations engineer identifies known and unknown threats to a company’s computer systems, understands adversary tactics, techniques, and procedures, and helps respond to detected incidents. They support the security operations center in understanding incidents targeting a company, implement and improve threat detection capabilities, and drive security monitoring efforts. Daily responsibilities of a threat response engineer include:

• Thinking like an attacker and a defender to identify and protect against threats.
• Automating detection and monitoring using open source and proprietary tools.
• Responding to security issues under high pressure.
• Coordinating and communicating across teams as part of incident response.
• Designing and performing tabletop exercises, and performing incident response readiness assessments.