Hybrid SOC Incident Response Engineer II

ZP Group; Carrollton (TX); Hybrid; USD 115,000 - 125,000; Full time

Benefits offered by this job

PTO

Paid Holidays

Medical

Dental

Vision

401K

Tuition Reimbursement

Sick Leave

Job summary

Piper Companies seeks an Engineer II – Cyber Incident Response to join a fast-paced SOC focused on detecting, investigating, and mitigating cybersecurity incidents in a global environment. You will work with SIEM/EDR tools, analyze logs, and help strengthen incident response playbooks and procedures.

Hybrid role based in Philadelphia with full benefits and opportunities for professional growth. This position requires 2–5 years in cybersecurity, with hands-on SOC experience; a degree in a related

Qualifications

• 2–5 years of experience in cybersecurity, with at least 2 years in SOC operations or incident response.
• Hands-on experience with SIEM, EDR, and forensic tools such as Splunk, CrowdStrike, and Wireshark.
• Strong understanding of incident response methodologies, log analysis, and adversary tactics (NIST, MITRE ATT&CK, ISO 27035).
• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or equivalent professional experience.

Responsibilities

• Investigate and respond to cybersecurity incidents (phishing, malware, ransomware, unauthorized access).
• Conduct in-depth analysis of logs and forensic data to determine scope, root cause, and impact.
• Escalate high‑severity incidents with clear documentation and evidence.
• Assist with containment, eradication, and recovery during active incidents.
• Contribute to SOC playbooks, runbooks, and standard operating procedures.

Skills

SOC Operations

Incident Response

Threat Analysis

Education

Bachelor’s degree or equivalent experience

Tools

Splunk

CrowdStrike

Wireshark

Job description

Piper Companies seeks an Engineer II – Cyber Incident Response to join a fast-paced SOC focused on detecting, investigating, and mitigating cybersecurity incidents in a global environment. You will work with SIEM/EDR tools, analyze logs, and help strengthen incident response playbooks and procedures.

Hybrid role based in Philadelphia with full benefits and opportunities for professional growth. This position requires 2–5 years in cybersecurity, with hands-on SOC experience; a degree in a related