Security Engineer: AI-Driven SOC & Incident Response

Echo Global Logistics; Chicago (IL); On-site; USD 98,000 - 142,000; Full time

Job summary

Echo Global Logistics in Illinois is seeking a Security Engineer with 4+ years of security operations experience to join our 24/7 SOC. You will hands-on contribute to detection, investigation and response, building AI-powered workflows and content in a SOX-regulated environment.

You will triage alerts, lead investigations, tune SIEM/SOAR/EDR, write playbooks, hunt threats, and maintain audit-ready evidence while collaborating with IT, Cloud, Risk and Compliance.

Qualifications

• Bachelor’s degree in computer science, cybersecurity, or related field.
• 4+ years in security operations, incident response, or threat detection.
• Deep expertise with SIEM, SOAR, EDR/XDR and detection engineering.
• Experience writing SOAR playbooks and detection rules.
• Experience in SOX and SOC 2 Type 2 environments.
• Hands-on experience applying AI/LLMs to security operations.

Responsibilities

• Triage, investigate, and respond to alerts in the SOC queue per playbooks.
• Lead incident investigations, gather evidence, and coordinate containment.
• Build AI-assisted workflows across SIEM, SOAR, and EDR.
• Engineer detection content and tune rules mapped to MITRE ATT&CK.
• Write SOAR playbooks and automation scripts to speed response.
• Hunt for threats using current adversary TTPs.
• Maintain SOC tech stack and ensure audit-ready evidence.
• Collaborate with IT, Cloud, Risk, and Compliance.

Skills

Security operations

Incident response

Threat detection

Communication skills

AI / LLMs in security

Education

Bachelor's degree in Computer Science or Cybersecurity

Tools

SIEM

SOAR

EDR/XDR

Job description

Echo Global Logistics in Illinois is seeking a Security Engineer with 4+ years of security operations experience to join our 24/7 SOC. You will hands-on contribute to detection, investigation and response, building AI-powered workflows and content in a SOX-regulated environment.

You will triage alerts, lead investigations, tune SIEM/SOAR/EDR, write playbooks, hunt threats, and maintain audit-ready evidence while collaborating with IT, Cloud, Risk and Compliance.