SOC Engineer -Threat Detection & Response

📋 Description

• Engineer end-to-end SOC workflows from intake → triage → investigation → containment → lessons learned.
• Standardize and simplify analyst motions by building reusable workflow components and response patterns.
• Improve case management hygiene, escalation criteria, severity frameworks, and handoffs across SOC/IR/MSSP.
• Identify bottlenecks and failure modes in current operations and deliver concrete engineering fixes.
• Build and maintain SOAR playbooks and workflow automations for enrichment, triage, containment support, and remediation.
• Implement safe automation patterns: approvals, policy constraints, break glass, and full audit logging.

🎯 Requirements

• 5+ years in SOC engineering, security engineering, incident response engineering, or automation/orchestration roles.
• Strong engineering fundamentals (version control, testing discipline, scripting/programming).
• Proven ability to build workflow automation and integrate security platforms into reliable operational processes.
• Experience translating operational pain points into scalable tooling and measurable outcomes.
• Experience implementing AI-assisted SOC capabilities with strong governance and evaluation.
• Familiarity with agent/tool invocation patterns (MCP-like concepts, secure tool access, auditability).

🎁 Benefits

• In-office role in New York or Boston.
• Equal opportunity employer.
• Collaborative, global TD&R team and MSSP partner.