SOC Cyber Incident Response Engineer

Swisslog; Newport News (VA); On-site; USD 85,000 - 120,000; Full time

Job summary

Swisslog in Newport News, VA seeks a Cyber Security Incident Responder to monitor and respond to cybersecurity incidents across the enterprise. You will analyze alerts, coordinate containment, and work with global IT teams to strengthen security posture.

Responsibilities include incident triage, evidence collection, and documenting investigations while contributing to detection improvements and automation initiatives with SOAR playbooks.

Qualifications

• IT experience or Bachelor's degree in Computer Science, Information Security, Information Technology, or related field.
• Knowledge of Windows OS and general IT problem solving.
• Experience with phishing, malware, ransomware, account compromise, or insider-threat investigations is a plus.
• Basic understanding of SOAR technology is a plus.
• Experience in a 24x7 SOC or shift-based environment is an advantage.
• Understanding of common network services (Web, mail, DNS, authentication) is a plus.
• Hands-on experience in IT security (Threat prevention, SIEM, Endpoint protection) is a plus.
• Experience with scripting or automation using PowerShell or Python is an advantage.

Responsibilities

• Monitor, investigate, triage, and respond to cybersecurity incidents across the enterprise.
• Analyze security alerts and coordinate containment and remediation activities.
• Support SOC with detection improvements and automation initiatives via SOAR playbooks.
• Document investigations and remediation actions in case management systems.
• Collaborate with global IT and security teams to reduce cyber risk.
• Identify compromised computers using logs and related evidence sources.
• Perform event analysis and tool utilization for identification, response, and escalation.
• Maintain awareness of changing processes, procedures, and standards.
• Demonstrate willingness to learn and take on additional responsibilities.

Skills

Windows OS

IT Experience

Phishing/Malware

SOAR

SOC 24x7

Scripting

Network services

SIEM

Endpoint protection

Education

Bachelor's degree in Computer Science/Info Security/IT

Tools

PowerShell

Python

SOAR platform

Microsoft Defender XDR

Job description

Swisslog in Newport News, VA seeks a Cyber Security Incident Responder to monitor and respond to cybersecurity incidents across the enterprise. You will analyze alerts, coordinate containment, and work with global IT teams to strengthen security posture.

Responsibilities include incident triage, evidence collection, and documenting investigations while contributing to detection improvements and automation initiatives with SOAR playbooks.