SOC & Incident Response Engineer — 24/7

Williams-Sonoma, Inc.; New York (NY); Sur place; USD 100 000 - 130 000; Plein temps

Avantages offerts par ce poste

Discount on all WSI brands

401(k) plan

Paid vacations, holidays, and time off

Health benefits, dental and vision

Tax-free commuter benefits

Wellness program

Résumé du poste

Williams-Sonoma, Inc. is seeking an Information Security Engineer for the SOC/Incident Response to provide Level 2 security operations support, including alert triage, event investigation, and coordinated incident response, with a 24x7 SOC rotation.

You will participate in playbooks, escalation procedures, and coordinate with Threat Intelligence and Detection Engineering to protect enterprise systems.

Qualifications

• 3 years of experience in security operations, incident response, IT security, or a related technical field.
• Bachelor's degree in Computer Science or related field, or equivalent work experience
• Foundational knowledge of security monitoring, endpoint security, operating systems, networking, and common attack techniques.
• Experience triaging alerts, investigating security events, and documenting findings.
• Familiarity with SIEM, EDR, case management, and escalation procedures.
• Ability to work effectively in a 24x7 operational environment and communicate clearly during time-sensitive events.
• This role requires being onsite in the Rocklin, CA, San Jose, CA or Brooklyn, NY office Monday through Thursday.

Responsabilités

• Triage, investigate, and document security alerts and events from Google SecOps, CrowdStrike, and other security monitoring platforms.
• Analyze endpoint, network, identity, and application evidence to distinguish malicious activity from benign events.
• Execute approved investigation and response playbooks through Cortex XSOAR and/or Google SecOps SOAR.
• Perform authorized containment actions under established procedures and approval requirements; promptly escalated actions outside delegated authority.
• Support incident investigations, evidence collection, timeline development, remediation coordination, and post-incident follow-up.
• Use CrowdStrike, Tanium, MISP, and related tools to enrich investigations and coordinate endpoint response.
• Escalate significant incidents and complex technical issues to senior responders, Incident Response leadership, and designated incident command roles.
• Partner with Cyber Threat Intelligence and Detection Engineering on threat hunts, detection feedback, and alert-quality improvements.
• Maintain accurate case notes, handoff documentation, and operational runbooks for continuous coverage.
• Participate in 24x7 shift operations, including weekends, holidays, and on-call responsibilities, as assigned.
• Identify opportunities for safe automation and AI-assisted investigative efficiency while validating results and following response controls.

Connaissances

Security operations

Incident response

24x7 operations

Effective communication

Formation

Bachelor's degree in Computer Science or related field

Outils

Google SecOps

CrowdStrike

Cortex XSOAR

Google SecOps SOAR

Tanium

MISP

Description du poste

Williams-Sonoma, Inc. is seeking an Information Security Engineer for the SOC/Incident Response to provide Level 2 security operations support, including alert triage, event investigation, and coordinated incident response, with a 24x7 SOC rotation.

You will participate in playbooks, escalation procedures, and coordinate with Threat Intelligence and Detection Engineering to protect enterprise systems.