Senior SOC Engineer – Threat Detection & Response

BDO USA, Llp; Grand Rapids (MI); On-site; USD 60,000 - 95,000; Full time

Job summary

BDO USA, LLP is seeking a SOC Engineer to join the Cyber team in our Security Operations Center. You will serve as an escalation responder to security events, perform triage, containment, and post-incident analysis, and help monitor the organization’s security posture.

The role requires strong problem-solving, analytics, and communication skills, with experience in cloud tech, EDR/SIEM, and network security tools.

Qualifications

• High School Diploma or GED, must be completed.
• Bachelor’s Degree in Information Technology, Cybersecurity, or Computer Science preferred.
• Three (3) or more years of experience in information security, cybersecurity, system or networking.
• Two (2) or more years with cloud technologies such as Azure, AWS, or similar.
• Two (2) or more years with EDR or SIEM platforms.
• Experience with help desk ticketing systems and service desk tools preferred.

Responsibilities

• Monitors security event platforms and follows incident playbooks for first response and triage.
• Conducts network monitoring and analyzes traffic using IDS/IPS, firewalls, HBSS, Azure security, and log management.
• Provides proactive feedback to improve monitoring rules based on new threats.
• Creates daily, weekly, and monthly reports for Security Management.
• Performs frontline response and updates runbooks and procedures as needed.
• Compiles statistics and contributes to playbook improvements.
• Stays current with threat intel through public resources and participates in on-call rotation.

Skills

Problem solving

Analytics

Security monitoring

Incident response

Education

High School Diploma or GED

Bachelor’s Degree in IT, Cybersecurity, or CS

Tools

Microsoft Sentinel

HBSS

IDS/IPS

Azure security

Firewalls

Job description

BDO USA, LLP is seeking a SOC Engineer to join the Cyber team in our Security Operations Center. You will serve as an escalation responder to security events, perform triage, containment, and post-incident analysis, and help monitor the organization’s security posture.

The role requires strong problem-solving, analytics, and communication skills, with experience in cloud tech, EDR/SIEM, and network security tools.