Security Ops Engineer: Incident Response & Threat Detection

Kforce Inc; Draper (UT); On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

Medical/Dental/Vision insurance

HSA/FSA options

401(k) plan

Paid time off for salaried staff

Job summary

Kforce is seeking an IT Security Engineer in Draper, UT to join a security operations team protecting enterprise systems. You will investigate incidents, validate alerts, manage vulnerabilities, and collaborate with infrastructure, cloud, and application teams to reduce risk.

The role combines hands‑on security operations with incident response, security tooling administration, and continuous improvement initiatives. A relevant degree and certifications are preferred.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related discipline preferred.
• Security certification such as CompTIA Security+, CySA+, SecurityX, or equivalent.
• 3+ years of cybersecurity, security operations, incident response, or related IT security experience.
• Strong hands‑on experience investigating security incidents and responding to security alerts.
• Experience managing and supporting enterprise vulnerability management programs.
• Experience working with endpoint security technologies, including Antivirus (AV), EDR, and XDR solutions.
• Experience collaborating with infrastructure, application, and cloud teams to remediate security findings.
• Experience documenting investigations, response actions, and technical findings.
• Understanding of cyber threat actors, attack methodologies, threat detection, and incident response frameworks.

Responsibilities

• Investigate and respond to security alerts and incidents escalated by a 24/7 Security Operations Center (SOC).
• Perform alert validation, threat analysis, evidence collection, root cause investigation, and containment activities.
• Lead or support incident response efforts, including documentation, remediation coordination, and post-incident reviews.
• Maintain accurate records of investigations, findings, response actions, and security recommendations.
• Manage day‑to‑day vulnerability management activities, including vulnerability identification, prioritization, tracking, and remediation support.
• Partner with infrastructure, cloud, networking, and application teams to drive timely risk reduction efforts.
• Administer and support enterprise security technologies, including endpoint protection, detection, and response platforms.
• Assist with the optimization and maintenance of security services, policies, and operational controls.
• Tune and improve security monitoring rules, detections, and alerting mechanisms to reduce false positives and improve visibility.
• Develop and enhance security playbooks, response procedures, and operational runbooks.

Skills

Security operations

Incident response

Threat analysis

Vulnerability management

Endpoint security

EDR/XDR

ITSM/workflow

Education

Bachelor’s degree in Cybersecurity/CS/IT/Engineering

Tools

SIEM

EDR

XDR

Antivirus

Cloud (Azure/AWS)

Job description

Kforce is seeking an IT Security Engineer in Draper, UT to join a security operations team protecting enterprise systems. You will investigate incidents, validate alerts, manage vulnerabilities, and collaborate with infrastructure, cloud, and application teams to reduce risk.

The role combines hands‑on security operations with incident response, security tooling administration, and continuous improvement initiatives. A relevant degree and certifications are preferred.