Security Engineer

Echo Global Logistics; United States; Remote; USD 98,000 - 142,000; Full time

Job summary

Echo Global Logistics is seeking a Security Engineer to join our 24/7 SOC, hands‑on and focused on detection, investigation, and response. You will build AI-powered workflows and content, drive operational excellence in a SOX-regulated, SOC 2 Type 2 environment.

You’ll triage alerts, lead investigations, and engineer detection across SIEM, SOAR, and EDR with MITRE ATT&CK mappings. Collaboration with IT, Risk, and Compliance is essential to surface findings clearly.

Qualifications

• Bachelor’s degree or equivalent practical experience in a related field.
• 4+ years in security operations, incident response, or threat detection.
• Deep expertise with SIEM, SOAR, EDR/XDR, detection engineering and IR.
• Experience writing SOAR playbooks and detection rules or queries in a major SIEM.
• Experience operating in SOX and SOC 2 Type 2 environments, including audit support.
• Hands-on experience applying AI/LLMs to security operations or detection and response.
• Strong communication skills with technical and non-technical stakeholders.

Responsibilities

• Triage, investigate, and respond to alerts across the SOC queue, meeting SLAs and following playbooks.
• Lead incident investigations, gather evidence, correlate events, and coordinate containment and recovery.
• Build and tune AI-assisted workflows across SIEM, SOAR, and EDR, including Claude via API.
• Engineer detection content: rules, queries, and alert tuning mapped to MITRE ATT&CK.
• Write and maintain SOAR playbooks and automation scripts to reduce manual toil.
• Hunt for threats and test hypotheses against current adversary TTPs.
• Maintain SOC tech stack, integrations, health, and content engineering.

Skills

Security operations

Incident response

Threat detection

AI/LLMs in security

Communication

Education

Bachelor’s degree in computer science or cybersecurity

Tools

SIEM

SOAR

EDR/XDR

MITRE ATT&CK

Job description

We are seeking a Security Engineer with 4+ years of security operations experience to serve as a hands‑on technical contributor within our 24/7 Security Operations Center (SOC). In this role you will be a core executor of our detection, investigation, and response capability, building AI-powered workflows, engineering detection content, and driving operational excellence in a SOX-regulated, SOC 2 Type 2 certified environment.

What You’ll Do

• Triage, investigate, and respond to alerts across the SOC queue, hitting SLAs and following playbooks

• Lead incident investigations, gather evidence, correlate events, and coordinate containment and recovery

• Build and tune AI-assisted and agentic workflows across SIEM, SOAR, and EDR, including Claude via API

• Engineer detection content: rules, queries, and alert tuning mapped to MITRE ATT&CK

• Write and maintain SOAR playbooks and automation scripts that cut manual toil and accelerate response

• Hunt for threats proactively, forming and testing hypotheses against current adversary TTPs

• Maintain the SOC technology stack: integrations, health, and content engineering across all platforms

• Keep SOX and SOC 2 Type 2 audit-ready evidence: logging coverage, incident records, and procedures

• Partner with IT, Cloud, Risk, and Compliance to embed telemetry and surface findings clearly

• undefined

What You’ll Bring

• Bachelor’s degree in computer science, Cybersecurity, or a related field (or equivalent practical experience).

• 4+ years of hands‑on experience in security operations, incident response, or threat detection

• Deep expertise with SIEM, SOAR, EDR/XDR, detection engineering, and incident response

• Experience writing SOAR playbooks and detection rules or queries in a major SIEM platform

• Experience operating in SOX and SOC 2 Type 2 environments, including control evidence and audit support

• Hands‑on experience applying AI/LLMs to security operations or detection and response

• Strong communication skills with both technical peers and non-technical stakeholders

• undefined

People’s Skills

• Strong attention to detail with the ability to communicate technical concepts clearly to both technical and non-technical stakeholders

• Proactive, self-motivated, and results-driven mindset

• Thrives in a fast-paced, collaborative, team-oriented environment

• Excellent written and verbal communication skills

• Passion for continuous learning and staying current with emerging technologies.

Echo Global Logistics is a leading provider of technology-enabled transportation management services. As a third‑party logistics provider, we simplify transportation management for our clients and carriers, handling crucial tasks so they can focus on what they do best. From coast to coast, dock to dock, and across all major transportation modes, Echo connects businesses that need to ship their products with carriers who transport goods quickly, securely, and cost-effectively.

Work environment/physical demands summary:

This job operates in an office environment and uses a computer, telephone and other office equipment as needed to perform duties. The noise level in the work environment is typical of that of an office with an open seating floor plan. The employee may encounter frequent interruptions throughout the work day. The employee is regularly required to sit, talk, or hear.

All qualified applicants will receive consideration for employment without regard to age, race, color, religion, sex, sexual orientation, gender identity, national origin, status as a qualified individual with a disability, or Vietnam era or other protected veteran.

Benefits

For more information about our benefit offerings, please visit our careers page at https://www.echo.com/company/careers.

Compensation

$97,864.00-142,293.00 per year

This role is eligible for a bonus that is based on a combination of personal and business performance.