SOC Engineer

Kforce has a client that is seeking a SOC Engineer in either the Greater New York City area or Boston Metro (On-site/Hybrid). The Mission We are seeking an engineering-centric Security Operations (SOC Engineer) professional to scale our defensive capabilities within a large-scale enterprise environment. This isn't a traditional "eyes-on-glass" analyst role - we need a builder who views security through the lens of systems engineering and automation. If you enjoy solving operational bottlenecks by designing durable, automated workflows, this role is built for you. How You'll Make an Impact:

• Architecture & Workflow: Architect end-to-end incident response lifecycles, from initial signal ingestion to automated containment and post-remediation
• SOAR & Orchestration: Build and refine complex playbooks to handle data enrichment, triage, and rapid response, reducing the need for manual intervention
• Ecosystem Integration: Bridge the gap between disparate security layers-including identity providers, cloud infrastructure, and endpoint protection-through custom integrations and APIs
• Data Integrity: Optimize the quality of security telemetry to ensure every alert is actionable, contextual, and high-fidelity
• Safety & Governance: Implement auditable automation with robust human-in-the-loop approvals and logging guardrails
• Performance Engineering: Define and track success through technical KPIs such as MTTA (Mean Time to Acknowledge) and MTTR (Mean Time to Remediate)
• Experience: A proven track record in security engineering, IR automation, or DevSecOps within complex environments
• Engineering First: Strong fundamentals in systems software, including experience with version control (Git), scripting, and API development
• Tech Stack: Proficiency in enterprise-grade SIEM/Log Management platforms, cloud service providers, and endpoint telemetry
• Operational Mindset: The ability to translate real-world incident pain points into scalable, automated solutions

Preferred Qualifications:

• Experience securing multi-cloud or hybrid-cloud architectures
• Background in detection engineering, including purple teaming or adversary emulation
• Familiarity with incorporating LLMs or AI-driven workflows into security operations within a governed framework

Why This Role? You will join an established team with the autonomy to modernize legacy processes without the burden of "starting from scratch." We value builders who want to experiment, iterate, and see their engineering efforts directly improve the organization's resilience.