ZipRecruiter

Log In

1

Security Operations Center Soc Engineer Jobs (NOW HIRING)

Procom Consultants Group

SOC Engineer

Dallas, TX · On-site

... Security Operations Center in Dallas, TX. We are looking for candidates who can provide a ... SOC Engineer Mandatory Skills -Appropriate candidates should possess at least 5-7 years' experience ...

next page

Showing results 1-20

All JobsSecurity Operations Center Soc Engineer Jobs

Security Operations Center Soc Engineer information

See salary details

$33.5K

$137.7K

$174K

How much do security operations center soc engineer jobs pay per year?

As of Aug 6, 2026, the average yearly pay for security operations center soc engineer in the United States is $137,745.00, according to ZipRecruiter salary data. Most workers in this role earn between $111,000.00 and $173,000.00 per year, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive as a Security Operations Center (SOC) engineer, and why are they important?

To thrive as a Security Operations Center (SOC) Engineer, you need strong analytical skills, a solid understanding of network security principles, and typically a degree in computer science or cybersecurity. Familiarity with SIEM tools (like Splunk or QRadar), intrusion detection systems, and relevant certifications such as CompTIA Security+ or CISSP are highly valued. Excellent problem-solving abilities, attention to detail, and effective communication make someone stand out in this role. These skills and qualities are crucial for detecting, analyzing, and responding to security threats promptly, ensuring organizational data and infrastructure remain secure.

What are some common challenges faced by a Security Operations Center (SOC) engineer, and how can they be addressed?

SOC Engineers often face challenges such as managing a high volume of security alerts, staying updated with evolving threat landscapes, and ensuring effective communication across IT and security teams. To address these, it's important to leverage automation tools to filter and prioritize alerts, participate in ongoing training to remain current with new threats, and foster strong collaboration with other departments for coordinated incident response. Developing clear processes and documentation also helps mitigate confusion during high-pressure incidents.

What is the difference between Security Operations Center Soc Engineer vs Security Analyst?

AspectSecurity Operations Center Soc EngineerSecurity Analyst
CertificationsCompTIA Security+, CISSP, CEHCompTIA Security+, GIAC Security Essentials (GSEC)
Work EnvironmentSecurity operations center, monitoring and responding to threatsAnalyzing security data, assessing vulnerabilities
Employer & IndustryCybersecurity firms, large enterprises, government agenciesOrganizations with security teams, IT departments

While both roles focus on cybersecurity, Security Operations Center Soc Engineers primarily design, implement, and respond to security threats within a SOC environment. Security Analysts analyze security data and identify vulnerabilities. SOC Engineers often have more technical responsibilities related to system configuration and incident response, whereas Security Analysts focus on monitoring and reporting. Both roles are essential for a comprehensive security strategy.

What does a Security Operations Center (SOC) engineer do?

A Security Operations Center (SOC) Engineer is responsible for monitoring, detecting, and responding to cybersecurity threats within an organization's IT infrastructure. They use specialized tools and techniques to analyze security alerts, investigate incidents, and coordinate responses to minimize risk. SOC Engineers also help maintain and improve security systems, conduct vulnerability assessments, and implement security best practices to protect sensitive data and resources. Their role is critical in ensuring the organization's information security posture remains strong against evolving threats.
More about Security Operations Center Soc Engineer jobs
What cities are hiring for Security Operations Center Soc Engineer jobs? Cities with the most Security Operations Center Soc Engineer job openings:
What job categories do people searching Security Operations Center Soc Engineer jobs look for? The top searched job categories for Security Operations Center Soc Engineer jobs are:
Security Operations Center Soc Engineer jobs near you
Infographic showing various Security Operations Center Soc Engineer job openings in the United States as of August 2026, with employment types broken down into 83% Full Time, and 17% Part Time. Highlights an 89% In-person, and 11% Remote job distribution, with an average salary of $137,745 per year, or $66.2 per hour.

Security Operations Center (SOC) Engineer

JBC powered by Workgenius

Foster City, CA • On-site

$75 - $82/hr

Other

Posted 9 days ago

Job description

Client: Autonomous Vehicle/Tech

Title: Security Operations Center (SOC) Engineer

Job Location: Foster City, CA

Duration: ~6 Months

Rate: $75 - $82/HR W2 (Commensurate with Experience)

Security Operations Center (SOC) Engineer

Foster City, CA (at least 3 days in office)
Our Client is seeking a motivated and experienced Security Operations Center (SOC) Engineer who will be responsible for improving the company''''''''s security posture via automation and threat hunting.

The ideal candidate will have a strong background in Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR) platforms, coupled with proficiency in Python scripting. This role is pivotal in enhancing the company''''''''s security posture by developing and implementing automated security workflows, tuning detection capabilities, and responding to sophisticated cyber threats.

Key Responsibilities:

  • SIEM and SOAR Platform Management:
  • Maintain the company''''''''s SIEM and SOAR platforms to ensure optimal performance and effectiveness in detecting and responding to security threats.
  • Develop and fine-tune detection and correlation rules, dashboards, and reports within the SIEM to accurately detect anomalous activities.
  • Create, manage, and optimize SOAR playbooks to automate incident response processes and streamline security operations.
  • Automation and Scripting:
  • Utilize Python scripting to develop custom integrations and automate repetitive tasks within the SOC.
  • Build and maintain automation workflows to enhance the efficiency of threat detection, alert triage, and incident response.
  • Integrate various security tools and threat intelligence feeds with the company''''''''s SIEM and SOAR platforms using APIs and custom scripts.
  • Incident Response and Threat Hunting:
  • Conduct proactive threat hunting to identify potential security gaps and indicators of compromise.
  • Analyze security alerts and data from various sources to identify and respond to potential security incidents.
  • Collaboration and Documentation:
  • Collaborate with Information Security team members and other teams to enhance the overall security of the organization.
  • Create and maintain clear and comprehensive documentation for detection rules, automation workflows, and incident response procedures.

Required Qualifications:

  • 6+ years of experience in a Security Engineering Role supporting a Security Operations Center (SOC) environment or similar function.
  • Demonstrable experience with SOAR platforms (e.g., Palo Alto Cortex XSOAR, Splunk SOAR, Tines) and playbook development.
  • Proficiency in Python for scripting and automation of security tasks.
  • Strong understanding of incident response methodologies, threat intelligence, and cybersecurity frameworks (e.g., MITRE ATT&CK, NIST).
  • Excellent analytical and problem-solving skills with the ability to work effectively in a fast-paced environment.

Preferred Qualifications:

  • Relevant industry certifications such as CISSP, GCIH, or similar.
  • Experience with cloud security and environmental constructs (AWS, Azure, Google Cloud Platform).
  • Familiarity with other scripting languages (e.g., PowerShell, Bash).
  • Knowledge of network and endpoint security solutions.

Apply