24x7 SOC Engineer: Incident Response & Security

Williams-Sonoma, Inc.; Rocklin (CA); On-site; USD 90,000 - 110,000; Full time

Benefits offered by this job

Discount on Williams-Sonoma brands

401(k) plan

Paid vacations and holidays

Health, dental, vision insurance

Tax-free commuter benefits

Wellness program

Job summary

Williams-Sonoma, Inc. is seeking an Information Security Engineer to join the Enterprise Cyber Security team in a 24x7 SOC role. You will perform alert triage, investigations, and coordinated incident response to protect enterprise systems.

Requires 3+ years in security operations, a CS degree or equivalent, and familiarity with SIEM/EDR. Onsite in Rocklin, CA; weekends and on-call coverage may be required.

Qualifications

• 3 years of experience in security operations or incident response.
• Bachelor's degree in Computer Science or related field, or equivalent work experience.
• Foundational knowledge of security monitoring, endpoint security, operating systems, networking, and attack techniques.
• Experience triaging alerts, investigating security events, and documenting findings.
• Familiarity with SIEM, EDR, case management, and escalation procedures.

Responsibilities

• Triage, investigate, and document security alerts and events from Google SecOps, CrowdStrike, and other security monitoring platforms.
• Analyze endpoint, network, identity, and application evidence to distinguish malicious activity from benign events.
• Execute approved investigation and response playbooks through Cortex XSOAR and/or Google SecOps SOAR.
• Perform authorized containment actions under established procedures and approval requirements; promptly elevate actions outside delegated authority.
• Support incident investigations, evidence collection, timeline development, remediation coordination, and post-incident follow-up.
• Use CrowdStrike, Tanium, MISP, and related tools to enrich investigations and coordinate endpoint response.
• Escalate significant incidents and complex technical issues to senior responders, Incident Response leadership, and designated incident command roles.
• Partner with Cyber Threat Intelligence and Detection Engineering on threat hunts, detection feedback, and alert-quality improvements.

Skills

Security operations

Incident response

IT security

Threat monitoring

Education

Bachelor's degree in Computer Science or related field

Tools

SIEM

EDR

Case management

Job description

Williams-Sonoma, Inc. is seeking an Information Security Engineer to join the Enterprise Cyber Security team in a 24x7 SOC role. You will perform alert triage, investigations, and coordinated incident response to protect enterprise systems.

Requires 3+ years in security operations, a CS degree or equivalent, and familiarity with SIEM/EDR. Onsite in Rocklin, CA; weekends and on-call coverage may be required.