Senior SOC Engineer: Threat Detection & Incident Response

BDO USA; Fort Worth (TX); On-site; USD 60,000 - 95,000; Full time

Job summary

BDO USA seeks a SOC Engineer within the Cyber team to act as an escalation responder for security events in the Security Operations Center. The role requires strong problem-solving and analytics, supports security posture monitoring and threat response, and troubleshoots security incidents to determine extent, impact, and remediation options.

The engineer maintains knowledge of the threat landscape, helps enhance capabilities, and supports identification of new threat-detection methods.

Qualifications

• Bachelor’s degree in IT, cybersecurity, or CS as relevant.
• Three or more years of experience in information security, cybersecurity, systems, or networking.
• Three or more years with network protocols, configurations, or IT operations.
• Two or more years with cloud technologies (Azure, AWS) preferred.
• Two or more years with EDR or SIEM platforms preferred.

Responsibilities

• Monitors security event platforms and follows incident playbooks for first response and triage.
• Conducts network monitoring and intrusion detection analysis using IDS/IPS, firewalls, and related tools.
• Provides proactive feedback to improve monitoring rules and detections.
• Creates regular reports for Security Management Team.
• Performs frontline response and updates runbooks as needed.
• Participates in on-call rotation and incident response activities.
• Keeps knowledge up to date with threat landscape and detection techniques.

Skills

Analytical thinking

Problem solving

Communication skills

Team collaboration

Education

Bachelor’s Degree in Information Technology, Cybersecurity, or Computer Science

High School Diploma or GED

Tools

Microsoft Sentinel

Wireshark

IDS/IPS

Firewalls

HBSS

Azure security

Audit log management

EDR platforms

SIEM platforms

Windows

Linux

TCP/IP

Logging analysis

Job description

BDO USA seeks a SOC Engineer within the Cyber team to act as an escalation responder for security events in the Security Operations Center. The role requires strong problem-solving and analytics, supports security posture monitoring and threat response, and troubleshoots security incidents to determine extent, impact, and remediation options.

The engineer maintains knowledge of the threat landscape, helps enhance capabilities, and supports identification of new threat-detection methods.