Cyber Incident Response Engineer II (Hybrid, Philly)

Piper Companies; Carrollton (TX); Hybrid; USD 115,000 - 125,000; Full time

Benefits offered by this job

PTO and holidays

Medical, dental, vision

401K

Tuition reimbursement

Sick leave

Job summary

Piper Companies is seeking an Engineer II – Cyber Incident Response to support enterprise cybersecurity operations in a fast-paced environment. The hybrid role is based in Philadelphia, PA, serving as a key SOC member responsible for detecting, investigating, and responding to cybersecurity incidents while strengthening incident response capabilities.

The position requires 2–5 years in cybersecurity with at least 2 years in SOC, hands-on SIEM/EDR/forensic tooling, and a bachelor's degree or

Qualifications

• 2–5 years of cybersecurity experience with at least 2 years in SOC
• Hands-on with SIEM, EDR and forensic tools (Splunk, CrowdStrike, Wireshark)
• Knowledge of incident response methodologies (NIST, MITRE ATT&CK, ISO 27035)
• Bachelor’s degree in Cybersecurity, CS, IT or equivalent professional experience

Responsibilities

• Investigate and respond to cybersecurity incidents such as phishing, malware, ransomware, and unauthorized access
• Perform in-depth analysis of logs, alerts, and forensic data to determine incident scope, root cause, and impact
• Escalate high-severity or complex incidents to senior engineering staff with clear documentation and supporting evidence
• Assist with containment, eradication, and recovery efforts during active incident response activities
• Contribute to the development and improvement of SOC playbooks, runbooks, and standard operating procedures

Skills

Incident response

Log analysis

Adversary tactics

Security operations

Education

Bachelor's degree or equivalent experience

Tools

Splunk

CrowdStrike

Wireshark

Job description

Piper Companies is seeking an Engineer II – Cyber Incident Response to support enterprise cybersecurity operations in a fast-paced environment. The hybrid role is based in Philadelphia, PA, serving as a key SOC member responsible for detecting, investigating, and responding to cybersecurity incidents while strengthening incident response capabilities.

The position requires 2–5 years in cybersecurity with at least 2 years in SOC, hands-on SIEM/EDR/forensic tooling, and a bachelor's degree or