SOC & Incident Response Engineer — 24/7 Security Operations

Williams-Sonoma, Inc.; Rocklin (CA); On-site; USD 90,000 - 110,000; Full time

Benefits offered by this job

Discount on Williams-Sonoma brands

401(k) plan and investments

Paid vacations and holidays

Health benefits, dental and vision

Job summary

Williams-Sonoma, Inc. is seeking an Information Security Engineer for the SOC/Incident Response team.

You will provide Level 2 security operations support, alert triage, and coordinated incident response, contributing to enterprise defense across endpoints, networks, and identities. The role requires 24x7 coverage, including weekends and on-call rotations, with on-site work at Rocklin, CA (also San Jose, CA and Brooklyn, NY as options).

Qualifications

• 3 years of experience in security operations, incident response, IT security, or a related field.
• Bachelor's degree in Computer Science or related field, or equivalent work experience.
• Foundational knowledge of security monitoring, endpoint security, OS, networking, and attack techniques.
• Experience triaging alerts, investigating security events, and documenting findings.
• Familiarity with SIEM, EDR, case management, escalation procedures.

Responsibilities

• Triage, investigate, and document security alerts from Google SecOps, CrowdStrike, and other platforms.
• Analyze endpoint, network, identity, and application evidence to distinguish malicious activity.
• Execute approved investigation and response playbooks via Cortex XSOAR and/or Google SecOps SOAR.
• Containment actions under procedures with escalations as needed.
• Support investigations, evidence collection, timeline development, remediation coordination, and post-incident follow-up.
• Coordinate with Threat Intelligence and Detection Engineering for hunts and improvements.
• Maintain accurate case notes and runbooks for continuous coverage.
• Participate in 24x7 shift operations including weekends and on-call duties.

Skills

Security operations

Incident response

24x7 readiness

Education

Bachelor's degree in CS or related field

Tools

Google SecOps

CrowdStrike

Cortex XSOAR

Tanium

MISP

Job description

Williams-Sonoma, Inc. is seeking an Information Security Engineer for the SOC/Incident Response team.

You will provide Level 2 security operations support, alert triage, and coordinated incident response, contributing to enterprise defense across endpoints, networks, and identities. The role requires 24x7 coverage, including weekends and on-call rotations, with on-site work at Rocklin, CA (also San Jose, CA and Brooklyn, NY as options).