SOC Level 2 Incident Response Engineer

Cybersecurity Jobs; New York (NY); In loco; USD 100.000 - 130.000; Tempo pieno

Vantaggi offerti da questo lavoro

401(k) plan

Paid vacations

Health benefits

Commuter benefits

Descrizione del lavoro

WSI is seeking a Level 2 SOC security operations specialist to support incident response from Brooklyn, NY onsite. You triage alerts, investigate events, and coordinate containment using established playbooks and escalation procedures.

Responsibilities include documenting findings, contributing to runbooks, and partnering with Threat Intelligence and Detection Engineering to improve alert quality and response effectiveness. Onsite work Monday through Thursday in Brooklyn, NY.

Competenze

• 3+ years of security operations, incident response, IT security, or related field.
• Bachelor’s degree in Computer Science or related field or equivalent experience.
• Foundational knowledge of security monitoring, endpoints, networks, and attack techniques.
• Experience triaging alerts, investigating security events, and documenting findings.

Mansioni

• Triage, investigate, and document security alerts and events.
• Analyze evidence across endpoint, network, identity, and application to separate malicious activity from benign events.
• Execute investigation and response playbooks using Cortex XSOAR and/or Google SecOps SOAR.
• Containment actions per procedures; escalate when outside authority.
• Support investigations including evidence collection, timeline development, remediation coordination, and post-incident follow-up.
• Use CrowdStrike, Tanium, MISP, and related tools to enrich investigations and coordinate endpoint response.
• Escalate significant incidents to senior responders and Incident Response leadership.
• Partner with Cyber Threat Intelligence and Detection Engineering on hunts and improvements.
• Maintain case notes, handoffs, and runbooks for continuous coverage.
• Participate in 24x7 shift operations; weekends, holidays, on-call as assigned.
• Identify opportunities for safe automation and AI-assisted analysis while validating results.

Conoscenze

Security operations

Incident response

Team collaboration

Automation basics

Formazione

Bachelor’s degree in Computer Science or related field

Strumenti

Google SecOps

CrowdStrike

Cortex XSOAR

Google SecOps SOAR

Tanium

MISP

SIEM

EDR

Descrizione del lavoro

WSI is seeking a Level 2 SOC security operations specialist to support incident response from Brooklyn, NY onsite. You triage alerts, investigate events, and coordinate containment using established playbooks and escalation procedures.

Responsibilities include documenting findings, contributing to runbooks, and partnering with Threat Intelligence and Detection Engineering to improve alert quality and response effectiveness. Onsite work Monday through Thursday in Brooklyn, NY.