> Markdown version of [/jobs/ext/3464191-security-engineer-incident-response-soc](https://www.wearedevelopers.com/jobs/ext/3464191-security-engineer-incident-response-soc). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Engineer Incident Response (SOC) - **Company:** Projas Technologies, LLC - **Location:** United States (Remote available) - **Contract:** Temporary contract - **Skills:** Artificial Intelligence, Cyber Security, Digital Forensics, Intrusion Detection and Prevention, Automation of Marketing, Runbook, Security Information and Event Management, Data Logging, Cloud Platform System, Servicenow, Vulnerability Analysis - **Published:** September 17, 2026 - **Apply:** https://www.dice.com/job-detail/d5676057-95fd-481a-8587-5d8bf8643fa6 ## About the Role * Strong experience in Incident Response, Cybersecurity Operations, or Security Engineering. * Hands-on experience investigating and responding to security incidents. * Experience performing digital forensics across endpoint, network, and cloud environments. * Strong understanding of attacker methodologies and threat investigation techniques. * Experience analyzing and correlating security events from SIEM, EDR, and enterprise logging platforms. * Experience developing or maintaining incident response playbooks and operational procedures. * Experience working within structured incident management processes and workflows. * Strong analytical, troubleshooting, communication, and stakeholder management skills. * Ability to work independently in a fast-paced security operations environment. Preferred Qualifications * Experience within enterprise SOC or Threat Operations environments. * Experience working with ServiceNow Security Incident Response (SIR). * Familiarity with AI-assisted security investigation and automation platforms. * Experience partnering with Detection Engineering, Risk, Compliance, and Legal teams. * Knowledge of vulnerability assessment and remediation practices. ## Description We are seeking an experienced Security Engineer to join our Threat Operations Security Operations Center (SOC) on a 12-month remote contract. This is a highly visible, hands-on incident response role focused on identifying, investigating, containing, and resolving sophisticated security threats across enterprise environments. The ideal candidate brings strong expertise in Incident Response, Digital Forensics, Threat Investigation, Security Operations, SIEM, and EDR technologies, along with a deep understanding of attacker behaviors, tactics, and methodologies. You'll work alongside cross-functional security teams, leverage AI-assisted security platforms, and help continuously improve incident detection and response capabilities., * Lead and respond to critical and escalated cybersecurity incidents from initial triage through containment, eradication, and closure. * Coordinate communications during active incidents and provide timely updates to stakeholders and senior leadership. * Conduct host, network, and cloud forensic investigations to determine root cause, scope, impact, and containment effectiveness. * Analyze and correlate security telemetry from SIEM, EDR, and other security platforms to validate threats and accelerate investigations. * Execute and refine incident response processes, playbooks, and runbooks to improve operational effectiveness. * Operate within ServiceNow Security Incident Response (SIR) workflows and contribute to process optimization efforts. * Identify detection gaps, monitoring deficiencies, and recurring false-positive patterns; partner with Detection Engineering teams on improvements. * Utilize AI-assisted SOC technologies to support investigation, triage, and response activities. * Collaborate with Compliance, Risk, Legal, and business stakeholders to ensure response activities align with organizational and regulatory requirements. * Assess vulnerabilities discovered during investigations and recommend remediation actions. * Stay current on emerging threats, attack techniques, and security best practices. * Mentor and support fellow incident responders through knowledge sharing and training. * Participate in post-incident reviews, lessons learned sessions, and continuous improvement initiatives. * Develop metrics and reporting that enhance visibility into incident response effectiveness. ## Related Videos - [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management) - [Technical Documentation - How Can I Write Them Better and Why Should I Care?](https://www.wearedevelopers.com/videos/681-technical-documentation-how-can-i-write-them-better-and-why-should-i-care) - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [AI in Production: applied AI & enterprise use cases](https://www.wearedevelopers.com/videos/100130-ai-in-production-applied-ai-enterprise-use-cases) - [Bridging AI and Nomad: a Go-based MCP Server for Cluster Control](https://www.wearedevelopers.com/videos/2063-bridging-ai-and-nomad-a-go-based-mcp-server-for-cluster-control) - [Build Delightful Mobile Experiences with Kotlin, Realm, and Atlas Device Sync](https://www.wearedevelopers.com/videos/694-build-delightful-mobile-experiences-with-kotlin-realm-and-atlas-device-sync) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [The Geometry of Incidents: Connecting User Impact to Architecture](https://www.wearedevelopers.com/magazine/764-the-geometry-of-incidents-connecting-user-impact-to-architecture)