SOC Incident Response Engineer II

Relha LLC; Conshohocken, Northern (Montgomery County, KY); Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

Medical, dental, and vision

Training and professional development

Mentorship programs

Job summary

Cencora is seeking an Engineer II, Cyber Incident Response, to join the Security Operations Center and advance our capabilities in detecting, investigating, and containing cyber threats. You will work with global teams to strengthen detection, respond to incidents, and contribute to playbooks and runbooks.

The role requires hands-on technical expertise, strong analytical skills, and the ability to thrive in a fast-paced environment.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or equivalent work experience.
• Strong knowledge of cybersecurity fundamentals, incident response methodology, and adversary tactics.
• Familiarity with NIST, MITRE ATT&CK, and ISO 27035 frameworks.

Responsibilities

• Investigate and respond to cybersecurity incidents, including phishing, malware, ransomware, and unauthorized access attempts.
• Perform analysis of logs, alerts, and forensic data to determine the scope and impact of incidents.
• Escalate complex or high-severity incidents to Engineer III, Lead, or Principal staff with clear documentation.
• Assist in containment, eradication, and recovery activities during incident response.
• Contribute to development and maintenance of SOC playbooks, runbooks, and SOPs.
• Collaborate with threat intel, vulnerability mgmt, and forensics to strengthen detection and response.
• Participate in lessons-learned sessions and improve SOC processes and tooling.
• Support junior analysts (Engineer I) with guidance on investigative techniques.

Skills

Cybersecurity basics

Incident response

Threat intelligence

Analytical thinking

Communication skills

Education

Bachelor’s degree in Cybersecurity, CS, IT, or equivalent

Tools

SIEM

EDR

Splunk

CrowdStrike

Wireshark

Job description

Cencora is seeking an Engineer II, Cyber Incident Response, to join the Security Operations Center and advance our capabilities in detecting, investigating, and containing cyber threats. You will work with global teams to strengthen detection, respond to incidents, and contribute to playbooks and runbooks.

The role requires hands-on technical expertise, strong analytical skills, and the ability to thrive in a fast-paced environment.