Support Level 2 SOC and incident response work to help protect enterprise systems, associates, customers, and data.

Triage, investigate, and document security alerts and events from Google SecOps, CrowdStrike, and other monitoring platforms
Analyze evidence across endpoint, network, identity, and application to separate malicious activity from benign events
Execute approved investigation and response playbooks using Cortex XSOAR and/or Google SecOps SOAR
Perform authorized containment actions under established procedures and approval requirements; escalate actions outside delegated authority
Support incident investigations including evidence collection, timeline development, remediation coordination, and post-incident follow-up
Use CrowdStrike, Tanium, MISP, and related tools to enrich investigations and coordinate endpoint response
Escalate significant incidents and complex technical issues to senior responders, Incident Response leadership, and designated incident command roles
Partner with Cyber Threat Intelligence and Detection Engineering on threat hunts, detection feedback, and alert-quality improvements
Maintain accurate case notes, handoff documentation, and operational runbooks to support continuous coverage
Participate in 24x7 shift operations, including weekends, holidays, and on-call responsibilities as assigned
Identify opportunities for safe automation and AI-assisted investigative efficiency while validating results and following response controls

3+ years experience in security operations, incident response, IT security, or a related technical field
Bachelor’s degree in Computer Science or related field, or equivalent work experience
Foundational knowledge of security monitoring, endpoint security, operating systems, networking, and common attack techniques
Experience triaging alerts, investigating security events, and documenting findings
Familiarity with SIEM, EDR, case management, and escalation procedures
Ability to work effectively in a 24x7 operational environment and communicate clearly during time-sensitive events
Preferred: experience with Google SecOps, CrowdStrike, Cortex XSOAR, Google SecOps SOAR, Tanium, or MISP
Preferred: experience supporting endpoint containment, evidence handling, threat hunting, or response playbooks
Preferred: basic scripting, automation, or AI-assisted analysis experience
Onsite requirement: Brooklyn, NY office Monday through Thursday

Generous discount on all WSI brands
401(k) plan and other investment opportunities
Paid vacations, holidays, and time off to volunteer
Health benefits, dental and vision insurance, including same-sex domestic partner benefits
Tax-free commuter benefits
Wellness program supporting physical, financial, and emotional health

Enterprise Cyber Security organization responsible for protecting WSI associates, customers, systems, and data
SOC monitors enterprise security events, investigates suspicious activity, and coordinates response with Incident Response, Threat Intelligence, Detection Engineering, and technology partners

Provide Level 2 security operations support through alert triage, event investigation, and coordinated incident response
Join a 24x7 SOC rotation (including weekends, holidays, and on-call coverage as assigned)
Use established playbooks and escalation procedures to protect enterprise systems

Location: Brooklyn, NY (onsite)

Compensation: USD 100,000 - 130,000 per year

Information Security Engineer - SOC / Incident Response

Job Description