SOC / Incident Response Engineer

<p data-start="129" data-end="522">The <strong data-start="133" data-end="169">SOC / Incident Response Engineer</strong> supports enterprise security monitoring, incident response, and threat detection across a hybrid IT environment, including on-premises infrastructure and cloud services. This role provides advanced security analysis, threat hunting, and detection engineering to strengthen organizational cybersecurity operations and continuous monitoring capabilities.</p> <p data-start="524" data-end="548"><strong data-start="524" data-end="548">Key Responsibilities</strong></p> <ul data-start="550" data-end="1512"> <li data-section-id="1ank5p" data-start="550" data-end="715"> Execute incident response processes in accordance with established incident response plans, standard operating procedures (SOPs), playbooks, and analyst workflows. </li> <li data-section-id="1pq2w8o" data-start="716" data-end="889"> Develop and maintain incident response SOPs, playbooks, workflows, and operational guidelines aligned with industry best practices and recognized cybersecurity frameworks. </li> <li data-section-id="ctufyi" data-start="890" data-end="1051"> Implement and integrate new incident response and threat intelligence capabilities with existing security tools and the organization's cybersecurity ecosystem. </li> <li data-section-id="16pbvue" data-start="1052" data-end="1256"> Monitor cloud-based Web Application Firewall (WAF) solutions to protect web applications from vulnerabilities, bot attacks, API abuse, and application-layer Distributed Denial of Service (DDoS) attacks. </li> <li data-section-id="13yc6d1" data-start="1257" data-end="1365"> Recommend and implement improvements to incident response policies, procedures, and operational processes. </li> <li data-section-id="15yuaq" data-start="1366" data-end="1512"> Research emerging incident response technologies, evaluate security tools, and recommend enhancements to improve incident response capabilities.</li> </ul>