What You’ll Do

• Triage, investigate, and respond to alerts across the SOC queue, hitting SLAs and following playbooks

• Lead incident investigations, gather evidence, correlate events, and coordinate containment and recovery

• Build and tune AI-assisted and agentic workflows across SIEM, SOAR, and EDR, including Claude via API

• Engineer detection content: rules, queries, and alert tuning mapped to MITRE ATT&CK

• Write and maintain SOAR playbooks and automation scripts that cut manual toil and accelerate response

• Hunt for threats proactively, forming and testing hypotheses against current adversary TTPs

• Maintain the SOC technology stack: integrations, health, and content engineering across all platforms

• Keep SOX and SOC 2 Type 2 audit-ready evidence: logging coverage, incident records, and procedures

• Partner with IT, Cloud, Risk, and Compliance to embed telemetry and surface findings clearly

• undefined

What You’ll Bring

• Bachelor’s degree in computer science, Cybersecurity, or a related field (or equivalent practical experience).

• 4+ years of hands-on experience in security operations, incident response, or threat detection

• Deep expertise with SIEM, SOAR, EDR/XDR, detection engineering, and incident response

• Experience writing SOAR playbooks and detection rules or queries in a major SIEM platform

• Experience operating in SOX and SOC 2 Type 2 environments, including control evidence and audit support

• Hands-on experience applying AI/LLMs to security operations or detection and response

• Strong communication skills with both technical peers and non-technical stakeholders

• undefined

People’s Skills

• Strong attention to detail with the ability to communicate technical concepts clearly to both technical and non-technical stakeholders

• Proactive, self-motivated, and results-driven mindset

• Thrives in a fast-paced, collaborative, team-oriented environment

• Excellent written and verbal communication skills

• Passion for continuous learning and staying current with emerging technologies.

Echo Global Logistics is a leading provider of technology-enabled transportation management services. As a third-party logistics provider, we simplify transportation management for our clients and carriers, handling crucial tasks so they can focus on what they do best. From coast to coast, dock to dock, and across all major transportation modes, Echo connects businesses that need to ship their products with carriers who transport goods quickly, securely, and cost-effectively.
 

Work environment/physical demands summary:

This job operates in an office environment and uses a computer, telephone and other

office equipment as needed to perform duties. The noise level in the work environment is typical of that of an office with an open seating floor plan. The employee may encounter frequent interruptions throughout the work day. The employee is regularly required to sit, talk, or hear.

#LI-MA1

All qualified applicants will receive consideration for employment without regard to age, race, color, religion, sex, sexual orientation, gender identity, national origin, status as a qualified individual with a disability, or Vietnam era or other protected veteran.

Benefits

For more information about our benefit offerings, please visit our careers page at https://www.echo.com/company/careers.

Compensation