Information Security Engineer - SOC​/Incident Response

Support Level 2 SOC and incident response work to help protect enterprise systems, associates, customers, and data.

• Triage, investigate, and document security alerts and events from Google Sec Ops
  , Crowd Strike
  , and other monitoring platforms
• Analyze evidence across endpoint, network, identity, and application to separate malicious activity from benign events
• Execute approved investigation and response playbooks using Cortex XSOAR and/or Google Sec Ops SOAR
• Perform authorized containment actions under established procedures and approval requirements;
  escalate actions outside delegated authority
• Support incident investigations including evidence collection
  , timeline development
  , remediation coordination
  , and post-incident follow-up
• Use Crowd Strike
  , Tanium
  , MISP
  , and related tools to enrich investigations and coordinate endpoint response
• Escalate significant incidents and complex technical issues to senior responders, Incident Response leadership, and designated incident command roles
• Partner with Cyber Threat Intelligence and Detection Engineering on threat hunts, detection feedback, and alert-quality improvements
• Maintain accurate case notes
  , handoff documentation, and operational runbooks to support continuous coverage
• Participate in 24x7 shift operations, including weekends, holidays, and on-call responsibilities as assigned
• Identify opportunities for safe automation and AI-assisted investigative efficiency while validating results and following response controls

• 3+ years experience in security operations, incident response, IT security, or a related technical field
• Bachelor’s degree in Computer Science or related field, or equivalent work experience
• Foundational knowledge of security monitoring, endpoint security, operating systems, networking, and common attack techniques
• Experience triaging alerts, investigating security events, and documenting findings
• Familiarity with SIEM
  , EDR
  , case management, and escalation procedures
• Ability to work effectively in a 24x7 operational environment and communicate clearly during time-sensitive events
• Preferred: experience with Google Sec Ops
  , Crowd Strike
  , Cortex XSOAR
  , Google Sec Ops SOAR
  , Tanium
  , or MISP
• Preferred: experience supporting endpoint containment, evidence handling, threat hunting, or response playbooks
• Preferred: basic scripting, automation, or AI-assisted analysis experience
• Onsite requirement:
  Brooklyn, NY office Monday through Thursday

• Google Sec Ops
• Crowd Strike
• Cortex XSOAR
• Google Sec Ops SOAR
• Tanium
• MISP
• SIEM
• EDR

• Generous discount on all WSI brands
• 401(k) plan and other investment opportunities
• Paid vacations, holidays, and time off to volunteer
• Health benefits, dental and vision insurance, including same-sex domestic partner benefits
• Tax-free commuter benefits
• Wellness program supporting physical, financial, and emotional health

• Enterprise Cyber Security organization responsible for protecting WSI associates, customers, systems, and data
• SOC monitors enterprise security events, investigates suspicious activity, and coordinates response with Incident Response, Threat Intelligence, Detection Engineering, and technology partners

• Provide Level 2 security operations support through alert triage, event investigation, and coordinated incident response
• Join a 24x7 SOC rotation (including weekends, holidays, and on-call coverage as assigned)
• Use established playbooks and escalation procedures to protect enterprise systems

• In-person and online learning opportunities through WSI University
• Cross-brand and cross-function career opportunities
• Resources for self-development
• Advisor (Mentor) program
• Career development workshops, learning programs, and speaker series

Location: Brooklyn, NY (onsite)

Compensation: USD 100, per year