SOC / Incident Response Engineer

CyberData Technologies•Remote, VA

10d•Hybrid

About The Position

The SOC / Incident Response Engineer supports enterprise security monitoring, incident response, and threat detection across a hybrid IT environment, including on-premises infrastructure and cloud services. This role provides advanced security analysis, threat hunting, and detection engineering to strengthen organizational cybersecurity operations and continuous monitoring capabilities.

Requirements

Experience in enterprise security monitoring
Experience in incident response
Experience in threat detection
Experience in hybrid IT environments (on-premises and cloud)
Advanced security analysis skills
Threat hunting skills
Detection engineering skills
Familiarity with incident response plans, SOPs, playbooks, and analyst workflows
Experience with cloud-based Web Application Firewall (WAF) solutions
Knowledge of cybersecurity frameworks

Responsibilities

Execute incident response processes in accordance with established incident response plans, standard operating procedures (SOPs), playbooks, and analyst workflows.
Develop and maintain incident response SOPs, playbooks, workflows, and operational guidelines aligned with industry best practices and recognized cybersecurity frameworks.
Implement and integrate new incident response and threat intelligence capabilities with existing security tools and the organization's cybersecurity ecosystem.
Monitor cloud-based Web Application Firewall (WAF) solutions to protect web applications from vulnerabilities, bot attacks, API abuse, and application-layer Distributed Denial of Service (DDoS) attacks.
Recommend and implement improvements to incident response policies, procedures, and operational processes.
Research emerging incident response technologies, evaluate security tools, and recommend enhancements to improve incident response capabilities.

Stand Out From the Crowd

Upload your resume and get instant feedback on how well it matches this job.

Upload and Match Resume