Fortinet Security Operations Expert 

United States, California, Sunnyvale 

625320064

Key Responsibilities:

• Monitor and respond to security incidents in alignment with incident response protocols.
• Conduct vulnerability assessments and manage remediation efforts.
• Perform log analysis, host-based, and network forensic investigations to identify threats.
• Administer and maintain security tools such as SOAR, SIEM, Anti-Virus, and similar platforms.
• Fine-tune incident detection and alert-triggering rules to minimize false positives and improve detection accuracy.
• Analyze and improve security measures by assessing and updating policies, configurations, and procedures.
• Maintain situational awareness by tracking emerging threats, attack patterns, and tactics, techniques, and procedures (TTPs).
• Develop comprehensive reports and presentations for both technical and non-technical audiences.
• Contribute to the SOC’s continuous improvement by refining workflows, automation, and system integrations.

Qualifications:

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field (or equivalent experience).
• 5+ years of experience in security operations, incident response, threat detection and analysis, governance and compliance or similar.
• Hands-on experience administering and configuring security tools such as FortiSOAR, FortiSIEM, FortiAnalyzer, FortiDeceptor, FortiGate and other Fortinet products. Understanding and building playbooks in SOAR in Json/Jinja experience is preferred.
• Strong understanding of detection engineering, fine-tuning alerting rules, and managing SIEM/EDR and vulnerability management systems.
• Proficiency in security frameworks and various compliance standards like ISO 27001, SOC, StateRAMP, FedRAMP, NIST, etc.
• Familiarity with scripting (e.g., Python, PowerShell) for task automation and tool customization.
• Strong analytical and troubleshooting skills for rapid issue resolution under pressure.
• Excellent communication skills, both written and verbal, for technical and executive audiences.
• Industry certifications such as CISSP, CISA, CRISC, CCSP, ISO 27001, or equivalent are highly preferred.

Wage ranges are based on various factors including the labor market, job type, and job level. Exact salary offers will be determined by factors such as the candidate's subject knowledge, skill level, qualifications, experience, and geographic location.