Remote-Eligible SOC Engineer: 24/7 Incident Response

Embedded Shishya; United States; Remote; USD 84,000 - 162,000; Full time

Benefits offered by this job

Competitive compensation

Work from anywhere in the UnitedStates

Paid time off

Bonus programs

Comprehensive benefits

Job summary

Mercury Insurance is seeking a Security Operations Center Engineer to identify, investigate, and escalate alerts, safeguarding sensitive information in a 24/7 environment. You will manage SOC/NOC tools, scripting, reporting, and automation while minimizing risk to the company infrastructure.

The role requires strong incident response skills, log analysis, and collaboration with IT teams. Experience with SIEMs and security tooling, plus relevant certifications, is preferred.

Qualifications

• BS degree in Computer Science, Information Technology or related field.
• Preferred GIAC Security Essentials Certification.
• Preferred GIAC Security Leadership Certification.
• Preferred ISACA CISSP/CISM certification.
• Experience with 24x7x365 security operations.

Responsibilities

• Monitor security tools and systems, analyzing logs and alerts for suspicious activity.
• Investigate potential threats and determine real incidents.
• Supervise incident response, including triage, troubleshooting and remediation.
• Gather and analyze evidence to understand incident scope and impact.
• Contain threats and remediate vulnerabilities through patches and config changes.
• Recover from incidents and report to management on progress.

Skills

Security operations

Incident response

Scripting/automation

Log analysis

Threat investigation

Communication with management

Critical thinking

Documentation

Disaster recovery

Team collaboration

Education

BS in CS/IT or related field

GIAC Security Essentials

GIAC Security Leadership

ISACA CISM/CISSP/SSCP

Microsoft MCSE: Security

(ISC)2 certifications

Tools

ExtraHop

Qradar

Splunk

ServiceNow

SIEM tools

Job description

Mercury Insurance is seeking a Security Operations Center Engineer to identify, investigate, and escalate alerts, safeguarding sensitive information in a 24/7 environment. You will manage SOC/NOC tools, scripting, reporting, and automation while minimizing risk to the company infrastructure.

The role requires strong incident response skills, log analysis, and collaboration with IT teams. Experience with SIEMs and security tooling, plus relevant certifications, is preferred.