SOC Detection Engineer - Remote/Hybrid Growth Path

Inforcer Ltd.; United States; Hybrid; USD 90,000 - 135,000; Full time

Benefits offered by this job

Competitive salary

Nest pension

Hybrid/remote

Team socials

Professional development

Inclusive environment

Recognition program

Job summary

inforcer is seeking a SOC Engineer to monitor, investigate and respond to security threats across our environment. You will triage incidents, perform log analysis, and collaborate with cross‑functional teams to drive containment and remediation.

The role requires hands-on experience with SIEM/EDR tools, strong analytical skills, and the ability to work in a fast‑paced, alert‑driven SOC. Hybrid/remote options and ongoing professional development are offered.

Qualifications

• Experience in a SOC or cyber operations environment.

Responsibilities

• Monitor SIEM, EDR/XDR, and security tooling for real-time alerts.
• Triage, investigate, and document incidents per playbooks.
• Analyze logs across network, endpoint, cloud, and identity systems.
• Escalate incidents and coordinate with CSIRT teams.
• Support containment and remediation including IOC collection.
• Improve detection content by tuning and reducing false positives.
• Participate in threat hunting and proactive investigations.
• Maintain incident records, timelines, post-incident reports.
• Assist onboarding of new security tools and processes.
• Stay current with threats and security best practices.

Skills

Analytical mindset

Clear communication

Calm under pressure

Collaborative

Threat detection mindset

Education

Security certifications (Security+, CySA+, GSEC, GCIA, GCIH, CEH)

Tools

Splunk

Microsoft Sentinel

QRadar

LogRhythm

CrowdStrike

Microsoft Defender

SentinelOne

Cortex

Job description

inforcer is seeking a SOC Engineer to monitor, investigate and respond to security threats across our environment. You will triage incidents, perform log analysis, and collaborate with cross‑functional teams to drive containment and remediation.

The role requires hands-on experience with SIEM/EDR tools, strong analytical skills, and the ability to work in a fast‑paced, alert‑driven SOC. Hybrid/remote options and ongoing professional development are offered.