SOC Engineer - Threat Detection & Response

RESPONSIBILITIES:
Kforce has a client that is seeking a SOC Engineer - Threat Detection & Response in New York, NY or Brighton, MA (on-site).

About the Opportunity:
We are looking for an engineering-driven SOC Engineer to help evolve and scale modern Threat Detection & Response operations within a complex, global environment. This role is ideal for someone who thinks like a builder - an engineer who enjoys designing systems, automating workflows, and solving operational challenges at scale.

You will focus on improving how security teams detect, triage, investigate, and respond to threats by engineering smarter workflows, automations, and integrations. While security knowledge is important, this is not a traditional SOC analyst role. Strong engineering fundamentals and curiosity matter most.

What You'll Work On:
* Engineer end-to-end SOC workflows from alert intake through investigation, containment, and continuous improvement
* Design and build automation that reduces manual effort, improves consistency, and speeds response times
* Develop and maintain SOAR playbooks and orchestration for enrichment, triage, and containment support
* Integrate security tooling across endpoint, identity, cloud, network, and SaaS platforms
* Improve data quality, enrichment, and context so alerts are actionable and decisions are faster
* Build safe, auditable automation with human approvals, logging, and clear guardrails
* Create analyst-assist workflows that summarize cases, correlate signals, and recommend next steps
* Strengthen detection quality and lifecycle management, from onboarding to validation and retirement
* Measure and improve outcomes using operational metrics like time-to-triage and time-to-contain

REQUIREMENTS:
* Reduced analyst toil through standardized workflows and automation
* Higher-quality investigations with better context and clearer response paths
* Faster, more consistent containment decisions
* Scalable, measurable detection and response operations built like products

What We're Looking For:
* Several years of experience in engineering-focused security, SOC engineering, IR engineering, or automation roles
* Strong software or systems engineering fundamentals (version control, testing, scripting/programming)
* Experience integrating and automating security platforms such as SIEM, EDR, and cloud services
* Comfort working with tools like Splunk, AWS, and endpoint security platforms (or equivalents)
* Ability to turn real-world operational pain points into scalable, reliable solutions
* A practical mindset that designs for real incidents, not just ideal architectures

Nice to Have:
* Multi-cloud experience
* Detection engineering or validation experience (simulations, testing, purple team exercises)
* Exposure to AI-assisted SOC workflows with appropriate governance and controls

Why Join:
You will have the autonomy to drive meaningful modernization without starting from zero. This is a hands-on role for someone who enjoys digging into complex problems, experimenting, and building durable systems that make a real difference in how security teams operate.

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.

By clicking ?Apply Today? you agree to receive calls, AI-generated calls, text messages or emails from Kforce and its affiliates, and service providers. Note that if you choose to communicate with Kforce via text messaging the frequency may vary, and message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You will always have the right to cease communicating via text by using key words such as STOP.