SOC Engineer

RESPONSIBILITIES:
Kforce has a client that is seeking a Security Automation & Operations Engineer (SOC) in a greater New York City area or Boston Metro (On-site/Hybrid).

The Mission:
We are seeking an engineering-centric Security Operations (SOC Engineer) professional to scale our defensive capabilities within a large-scale enterprise environment. This isn't a traditional "eyes-on-glass" analyst role; we need a builder who views security through the lens of systems engineering and automation. If you enjoy solving operational bottlenecks by designing durable, automated workflows, this role is built for you.

How You'll Make an Impact:
* Architecture & Workflow: Architect end-to-end incident response lifecycles, from initial signal ingestion to automated containment and post-remediation
* SOAR & Orchestration: Build and refine complex playbooks to handle data enrichment, triage, and rapid response, reducing the need for manual intervention
* Ecosystem Integration: Bridge the gap between disparate security layers-including identity providers, cloud infrastructure, and endpoint protection-through custom integrations and APIs
* Data Integrity: Optimize the quality of security telemetry to ensure every alert is actionable, contextual, and high-fidelity
* Safety & Governance: Implement auditable automation with robust human-in-the-loop approvals and logging guardrails
* Performance Engineering: Define and track success through technical KPIs such as MTTA (Mean Time to Acknowledge) and MTTR (Mean Time to Remediate)

REQUIREMENTS:
* Experience: A proven track record in security engineering, IR automation, or DevSecOps within complex environments
* Engineering First: Strong fundamentals in systems software, including experience with version control (Git), scripting, and API development
* Tech Stack: Proficiency in enterprise-grade SIEM/Log Management platforms, cloud service providers, and endpoint telemetry
* Operational Mindset: The ability to translate real-world incident pain points into scalable, automated solutions

Preferred Qualifications:
* Experience securing multi-cloud or hybrid-cloud architectures
* Background in detection engineering, including purple teaming or adversary emulation
* Familiarity with incorporating LLMs or AI-driven workflows into security operations within a governed framework

Why This Role:
You will join an established team with the autonomy to modernize legacy processes without the burden of "starting from scratch." We value builders who want to experiment, iterate, and see their engineering efforts directly improve the organization's resilience.

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.

By clicking ?Apply Today? you agree to receive calls, AI-generated calls, text messages or emails from Kforce and its affiliates, and service providers. Note that if you choose to communicate with Kforce via text messaging the frequency may vary, and message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You will always have the right to cease communicating via text by using key words such as STOP.