{"id":1779527,"url":"https://alion.io/job/inforcer-soc-engineer-us","title":"SOC Engineer - US","company":{"id":8625,"name":"Inforcer","domain":"inforcer.com","url":"https://alion.io/company/inforcer","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Teamtailor","truth_index":{"grade":"A","score":90,"open_postings":10,"ghost_share":0,"stale_share":0.4,"repost_share":0,"time_to_fill_p50_days":32,"computed_at":"2026-10-14T06:34:16Z"}},"role":"Hardware","role_family":"Hardware","seniority":null,"employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Tampa, United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":98000,"max_usd":223000,"period":"year","method":"role_country_seniority_unknown","sample_n":2532},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Cortex","optional":false},{"name":"Crowdstrike","optional":false},{"name":"IBM QRadar","optional":false},{"name":"LogRhythm","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SentinelOne","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"TCP/IP","optional":false},{"name":"Prometheus","optional":true}],"status":"live","first_seen_at":"2026-10-01T14:55:31Z","employer_posted_date":"2026-10-01","last_verified_at":"2026-10-14T03:26:55Z","board_verified":true,"closed_at":null,"days_open":13,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":13},"description":"About Us\ninforcer is a leading provider of innovative solutions in the cybersecurity sector and dedicated to enhancing efficiency, improving security and driving success for our clients. We focus on providing MSPs with fundamental tools and technology they need to manage Microsoft Security policies for multiple tenants in a simple and effective way. Our mission is to be inforced in every MSP!\nAbout the Role\nWe are seeking a SOC Engineer to play a critical role in monitoring, investigating, and responding to security threats across our environment. There are two key parts to the role.\nFirstly, you will act as the front line of our security operations; reviewing alerts, identifying suspicious activity, and conducting hands-on investigations using our SIEM, EDR, and threat intelligence tools. This is an operational role with real ownership, ideal for someone who thrives in a fast-paced environment, enjoys digging into logs, and can bring clarity to complex behaviours across our network, endpoints, and cloud platforms. As part of this, you will take part in regular out-of-hours work, which is a natural component of a 24/7 security operation and compensated as overtime.\nSecondly, you will help strengthen our detection and response capabilities by improving playbooks, enhancing alert quality, and contributing insights that increase our overall readiness. As our environment grows, you’ll play a pivotal role in reducing noise, closing detection gaps, and ensuring incidents are handled quickly, consistently, and with high quality. Your work will directly support our ability to remain secure, resilient, and able to operate without interruption.\nWhat you’ll be doing\nMonitor SIEM, EDR/XDR, and security tooling for real-time alerts and suspicious activity.\n\nTriage, investigate, and document security incidents following established playbooks.\n\nPerform log analysis across network, endpoint, cloud, and identity systems to identify potential threats.\n\nEscalate incidents as needed and collaborate with Security Engineering, IT, and Incident Response teams.\n\nSupport containment and remediation efforts, including isolating endpoints, collecting forensic artifacts, and validating indicators of compromise (IOCs).\n\nContribute to improving detection content by identifying gaps, false positives, and tuning opportunities.\n\nParticipate in threat hunting exercises and proactive investigations into anomalous behaviour.\n\nMaintain accurate incident records, timelines, and post-incident reporting.\n\nAssist with onboarding and operationalizing new security tools and processes.\n\nStay current with emerging threats, attack techniques, and security best practices.\n\nWhat We Can Offer You\nCompetitive Compensation: Attractive salary, Pension contribution scheme through Nest, Competitive annual leave allowance\nWork-Life Balance: Flexible working hours and hybrid/remote working options to support a healthy work-life balance\nRegular Team Socials: We celebrate our team, our milestones, and our new businesses with social events every month\nInvesting in Your Future: We encourage a growth mindset through proactive development opportunities. Such as continuous learning opportunities, professional training programs, and career advancement paths\nInclusive Environment: A supportive and inclusive workplace that values diversity and encourages collaboration and innovation\nEmployee Recognition: Programs to recognise and reward employees for their contributions and achievements\nSkills We Need for This Role\nCore Technical Skills\nHands-on experience with SIEM platforms (e.g., Splunk, Microsoft Sentinel, QRadar, LogRhythm).\n\nFamiliarity with EDR/XDR tools such as CrowdStrike, Microsoft Defender, SentinelOne, or Cortex.\n\nAbility to analyze logs from servers, endpoints, firewalls, IDS/IPS, and cloud environments.\n\nUnderstanding of common attack frameworks (MITRE ATT&CK) and threat actor behaviours.\n\nBasic knowledge of network security, TCP/IP, authentication flows, and identity logs.\n\nExperience responding to security incidents in a SOC or cyber operations environment.\n\nExposure to scripting or automation (Python, PowerShell) is a plus.\n\nSoft Skills & Behaviours\nStrong analytical mindset with the ability to spot patterns and anomalies.\n\nClear written communication for incident documentation and escalation.\n\nAbility to stay calm and focused during high-pressure security events.\n\nComfortable working in a fast-paced, alert-driven operational environment.\n\nCollaborative, curious, and proactive about learning new threat vectors and tools.\n\nQualifications\nRelevant certifications are helpful (Security+, CySA+, GSEC, GCIA, GCIH, CEH) but not required if experience is equivalent.\n\nDon’t quite have all of these skills? Why not apply and our team can review your experience and fit for the role. We’d love to hear from you!\ninforcer is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees","description_format":"text","description_chars":4979,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Annual leave","Continuous learning","Flexible schedule"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Information Technology","Security Operations","Managed IT Services (MSP)"],"lifecycle":[{"event":"open","at":"2026-10-03T17:11:01Z"},{"event":"close","at":"2026-10-07T08:24:25Z"},{"event":"reopen","at":"2026-10-07T18:29:48Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"evidence":"Licensed UK visa sponsor (Senior or Specialist Worker, Skilled Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Global Business Mobility: Senior or Specialist Worker; Skilled Worker","cap_exempt":false,"checked_at":"2026-10-14T06:20:30+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":79,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.831,"p_room":0.945,"age_days":12,"expected_fill_days":32,"reasons":["conf:3","velocity","win:mid"],"computed_at":"2026-10-14T06:34:16Z"},"pay":null,"html_url":"https://alion.io/job/inforcer-soc-engineer-us","json_url":"https://alion.io/job/inforcer-soc-engineer-us.json","meta":{"generated_at":"2026-10-14T20:34:22Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":27376,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":8625},"rest":"https://alion.io/mcp/rest/get_company?id=8625"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Finforcer-soc-engineer-us"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Finforcer-soc-engineer-us"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Finforcer-soc-engineer-us"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/inforcer-soc-engineer-us\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Finforcer-soc-engineer-us"}]}