Information Security Engineer - SOC and Incident Response
Role Overview
As an Information Security Engineer - SOC / Incident Response, you will provide Level 2 security operations support through alert triage, event investigation, and coordinated incident response.
You will participate in a 24x7 SOC rotation, including weekends, holidays, and on-call coverage as assigned, and use established playbooks and escalation procedures to protect enterprise systems.
Full Job Posting
Responsibilities
- Triage, investigate, and document security alerts and events from Google SecOps, CrowdStrike, and other security monitoring platforms.
- Analyze endpoint, network, identity, and application evidence to distinguish malicious activity from benign events.
- Execute approved investigation and response playbooks through Cortex XSOAR and/or Google SecOps SOAR.
- Perform authorized containment actions under established procedures and approval requirements; promptly escalate actions outside delegated authority.
- Support incident investigations, evidence collection, timeline development, remediation coordination, and post-incident follow-up.
- Use CrowdStrike, Tanium, MISP, and related tools to enrich investigations and coordinate endpoint response.
- Escalate significant incidents and complex technical issues to senior responders, Incident Response leadership, and designated incident command roles.
- Partner with Cyber Threat Intelligence and Detection Engineering on threat hunts, detection feedback, and alert-quality improvements.
- Maintain accurate case notes, handoff documentation, and operational runbooks for continuous coverage.
- Participate in 24x7 shift operations, including weekends, holidays, and on-call responsibilities, as assigned.
- Identify opportunities for safe automation and AI-assisted investigative efficiency while validating results and following response controls.
- Criteria
- 3 years of experience in security operations, incident response, IT security, or a related technical field.
- Bachelor's degree in Computer Science or related field, or equivalent work experience
- Foundational knowledge of security monitoring, endpoint security, operating systems, networking, and common attack techniques.
- Experience triaging alerts, investigating security events, and documenting findings.
- Familiarity with SIEM, EDR, case management, and escalation procedures.
- Ability to work effectively in a 24x7 operational environment and communicate clearly during time-sensitive events.
- Experience with Google SecOps, CrowdStrike, Cortex XSOAR, Google SecOps SOAR, Tanium, or MISP preferred.
- Experience supporting endpoint containment, evidence handling, threat hunting, or response playbooks preferred.
- Basic scripting, automation, or AI-assisted analysis experience preferred.
- This role requires being onsite in the Rocklin, CA, San Jose, CA or Brooklyn, NY office Monday through Thursday.
- Our Culture & Values
- We believe that taking care of our people is vital to our success and we strive to offer equitable and transparent practices for all. We prioritize connection, growth, and wellbeing.
- People First
- Putting People First means investing in overall well-being and opportunities to grow and advance within the organization. Depending on the position and location, here are a few highlights of what benefits may be available
Qualifications
- Bachelor's degree in Computer Science or related field, or equivalent work experience
- Familiarity with SIEM, EDR, case management, and escalation procedures.
Preferred Qualifications
- Experience with Google SecOps, CrowdStrike, Cortex XSOAR, Google SecOps SOAR, Tanium, or MISP preferred.
About Williams-Sonoma
Omni-channel specialty retailer of home furnishings and kitchenware.
Visit company websiteJobs and hiring trendsApply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Williams-Sonoma
Holiday Seasonal Stock Associate, Toronto - Pottery Barn
Toronto, CAN
Sales Associate, Part Time Flex, Toronto - Williams Sonoma
Etobicoke, CAN
Visual Associate, Part Time Flex, Toronto - Pottery Barn
Toronto, CAN
Visual Merch - Store
Portland, USA
About the Role Support management team in achieving goals by providing World-Class service. Serve as a role model for building relationships with customers. Maintain presence through store supervision to ensure appropria
Merchandise Coordinator, Lighting - Rejuvenation
Portland, USA
About the Team You will be part of a collaborative team responsible for creating assortment strategies based on analyzing sales and trends. Our job blends creativity, analytics, and marketing. As part of Williams-Sonoma,
Sales Assoc
Portland, USA
We hope you're interested in building a home with us. Even if you don't feel that you meet every requirement listed in this job description, we still encourage you to apply. About the Team Our mission is to enhance the q
Design Studio Spc/Home Stylist
Portland, USA
We hope you're interested in building a home with us. Even if you don't feel that you meet every requirement listed in this job description, we still encourage you to apply. About the Team Our mission is to enhance the q
Holiday Seasonal Stock Associate, Toronto - Pottery Barn
Toronto, CAN
Sales Associate, Part Time Flex, Toronto - Williams Sonoma
Etobicoke, CAN
Visual Associate, Part Time Flex, Toronto - Pottery Barn
Toronto, CAN
Stock Assoc
Calgary, CAN
Visual Merch - Store
Portland, USA
Merchandise Coordinator, Lighting - Rejuvenation
Portland, USA
Sales Assoc
Portland, USA
Design Studio Spc/Home Stylist
Portland, USA