Information Security Engineer - SOC and Incident Response

About this role

About the Team

You will be part of the Enterprise Cyber Security organization responsible for protecting WSI associates, customers, systems, and data. The Security Operations Center (SOC) monitors enterprise security events, investigates suspicious activity, and coordinates response with Incident Response, Threat Intelligence, Detection Engineering, and technology partners.

About the Role

As an Information Security Engineer - SOC / Incident Response, you will provide Level 2 security operations support through alert triage, event investigation, and coordinated incident response. You will participate in a 24x7 SOC rotation, including weekends, holidays, and on-call coverage as assigned, and use established playbooks and escalation procedures to protect enterprise systems.

Responsibilities

• Triage, investigate, and document security alerts and events from Google SecOps, CrowdStrike, and other security monitoring platforms.
• Analyze endpoint, network, identity, and application evidence to distinguish malicious activity from benign events.
• Execute approved investigation and response playbooks through Cortex XSOAR and/or Google SecOps SOAR.
• Perform authorized containment actions under established procedures and approval requirements; promptly escalate actions outside delegated authority.
• Support incident investigations, evidence collection, timeline development, remediation coordination, and post-incident follow-up.
• Use CrowdStrike, Tanium, MISP, and related tools to enrich investigations and coordinate endpoint response.
• Escalate significant incidents and complex technical issues to senior responders, Incident Response leadership, and designated incident command roles.
• Partner with Cyber Threat Intelligence and Detection Engineering on threat hunts, detection feedback, and alert-quality improvements.
• Maintain accurate case notes, handoff documentation, and operational runbooks for continuous coverage.
• Participate in 24x7 shift operations, includin...