Information Security Engineer - SOC / Incident Response

Cybersecurity Jobs; New York (NY); On-site; USD 100,000 - 130,000; Full time

Benefits offered by this job

401(k) plan

Paid vacations

Health benefits

Commuter benefits

Job summary

WSI is seeking a Level 2 SOC security operations specialist to support incident response from Brooklyn, NY onsite. You triage alerts, investigate events, and coordinate containment using established playbooks and escalation procedures.

Responsibilities include documenting findings, contributing to runbooks, and partnering with Threat Intelligence and Detection Engineering to improve alert quality and response effectiveness. Onsite work Monday through Thursday in Brooklyn, NY.

Qualifications

• 3+ years of security operations, incident response, IT security, or related field.
• Bachelor’s degree in Computer Science or related field or equivalent experience.
• Foundational knowledge of security monitoring, endpoints, networks, and attack techniques.
• Experience triaging alerts, investigating security events, and documenting findings.

Responsibilities

• Triage, investigate, and document security alerts and events.
• Analyze evidence across endpoint, network, identity, and application to separate malicious activity from benign events.
• Execute investigation and response playbooks using Cortex XSOAR and/or Google SecOps SOAR.
• Containment actions per procedures; escalate when outside authority.
• Support investigations including evidence collection, timeline development, remediation coordination, and post-incident follow-up.
• Use CrowdStrike, Tanium, MISP, and related tools to enrich investigations and coordinate endpoint response.
• Escalate significant incidents to senior responders and Incident Response leadership.
• Partner with Cyber Threat Intelligence and Detection Engineering on hunts and improvements.
• Maintain case notes, handoffs, and runbooks for continuous coverage.
• Participate in 24x7 shift operations; weekends, holidays, on-call as assigned.
• Identify opportunities for safe automation and AI-assisted analysis while validating results.

Skills

Security operations

Incident response

Team collaboration

Automation basics

Education

Bachelor’s degree in Computer Science or related field

Tools

Google SecOps

CrowdStrike

Cortex XSOAR

Google SecOps SOAR

Tanium

MISP

SIEM

EDR

Job description

Support Level 2 SOC and incident response work to help protect enterprise systems, associates, customers, and data.

Responsibilities

• Triage, investigate, and document security alerts and events from Google SecOps, CrowdStrike, and other monitoring platforms
• Analyze evidence across endpoint, network, identity, and application to separate malicious activity from benign events
• Execute approved investigation and response playbooks using Cortex XSOAR and/or Google SecOps SOAR
• Perform authorized containment actions under established procedures and approval requirements; escalate actions outside delegated authority
• Support incident investigations including evidence collection, timeline development, remediation coordination, and post-incident follow-up
• Use CrowdStrike, Tanium, MISP, and related tools to enrich investigations and coordinate endpoint response
• Escalate significant incidents and complex technical issues to senior responders, Incident Response leadership, and designated incident command roles
• Partner with Cyber Threat Intelligence and Detection Engineering on threat hunts, detection feedback, and alert-quality improvements
• Maintain accurate case notes, handoff documentation, and operational runbooks to support continuous coverage
• Participate in 24x7 shift operations, including weekends, holidays, and on-call responsibilities as assigned
• Identify opportunities for safe automation and AI-assisted investigative efficiency while validating results and following response controls

Requirements

• 3+ years experience in security operations, incident response, IT security, or a related technical field
• Bachelor’s degree in Computer Science or related field, or equivalent work experience
• Foundational knowledge of security monitoring, endpoint security, operating systems, networking, and common attack techniques
• Experience triaging alerts, investigating security events, and documenting findings
• Familiarity with SIEM, EDR, case management, and escalation procedures
• Ability to work effectively in a 24x7 operational environment and communicate clearly during time-sensitive events
• Preferred: experience with Google SecOps, CrowdStrike, Cortex XSOAR, Google SecOps SOAR, Tanium, or MISP
• Preferred: experience supporting endpoint containment, evidence handling, threat hunting, or response playbooks
• Preferred: basic scripting, automation, or AI-assisted analysis experience
• Onsite requirement: Brooklyn, NY office Monday through Thursday

Technologies

• Google SecOps
• CrowdStrike
• Cortex XSOAR
• Google SecOps SOAR
• Tanium
• MISP
• SIEM
• EDR

Benefits

• Generous discount on all WSI brands
• 401(k) plan and other investment opportunities
• Paid vacations, holidays, and time off to volunteer
• Health benefits, dental and vision insurance, including same-sex domestic partner benefits
• Tax-free commuter benefits
• Wellness program supporting physical, financial, and emotional health

About the Team

• Enterprise Cyber Security organization responsible for protecting WSI associates, customers, systems, and data
• SOC monitors enterprise security events, investigates suspicious activity, and coordinates response with Incident Response, Threat Intelligence, Detection Engineering, and technology partners

About the Role

• Provide Level 2 security operations support through alert triage, event investigation, and coordinated incident response
• Join a 24x7 SOC rotation (including weekends, holidays, and on-call coverage as assigned)
• Use established playbooks and escalation procedures to protect enterprise systems

Continued Learning

• In-person and online learning opportunities through WSI University
• Cross-brand and cross-function career opportunities
• Resources for self-development
• Advisor (Mentor) program
• Career development workshops, learning programs, and speaker series

Location: Brooklyn, NY (onsite)

Compensation: USD 100,000 - 130,000 per year