Date Posted: 09/10/2026
Hiring Organization: Rose International
Position Number: 507318
Industry: Software/Financial Services/IT Company
Job Title: Senior Incident Response Engineer (Digital Forensics or SOC)
Job Location: Remote, USA
Work Model: Remote
Shift: Standard PST Hours
Employment Type: Temporary
FT/PT: Full-Time
Estimated Duration (In months): 12
Min Hourly Rate($): 75.00
Max Hourly Rate($): 83.00
Must Have Skills/Attributes: AI, Incident Resolution, Security
Experience Desired: Incident Response & Digital Forensics (6+ yrs); SIEM / EDR / Threat Investigation (5+ yrs); SOC Operations & Incident Automation (4+ yrs); Cloud & Network Forensics (3+ yrs); Detection Engineering & Threat Intelligence (3+ yrs); AI-Assisted Security / Security Automation (1+ yrs)
**C2C is not available**
Job Description
Required Skills
• Incident Response & Digital Forensics — 6+ years
Hands-on experience leading security incidents from initial triage through containment, root-cause analysis, and closure
• SIEM / EDR / Threat Investigation — 5+ years
Strong experience correlating SIEM, EDR, endpoint, network, and cloud logs to detect, investigate, and validate security threats
• SOC Operations & Incident Automation — 4+ years
Experience with SOC workflows, incident response playbooks/runbooks, ServiceNow SIR, and automated security processes
Preferred Skills
• Cloud & Network Forensics — 3+ years
Experience conducting forensic investigations across cloud, network, and endpoint environments
• Detection Engineering & Threat Intelligence — 3+ years
Experience identifying detection gaps, false-positive patterns, attacker methodologies, vulnerabilities, and emerging threats
• AI-Assisted Security / Security Automation — 1+ years
Experience using AI-enabled SOC platforms, automation, or AI-assisted security tools to support threat triage and investigations
Job Overview:
Client is seeking an experienced Security Engineer for a one-year contract to join the Security Operations Center (SOC) within Threat Operations, focused primarily on incident response. This is a hands-on investigator role: detecting, analyzing, and responding to security incidents from initial triage through containment and closure. The ideal candidate has a strong incident response and digital forensics background, understands attacker methodology, and is comfortable operating within modern automation and AI-assisted security platforms.
Duties:
· Respond to and lead critical, escalated security incidents: coordinating communications, executing the Incident Response Plan, and delivering clear, timely status updates to stakeholders and senior leadership
· Perform comprehensive host, network, and cloud forensic analysis to determine root cause, scope, and impact, ensuring containment is validated against Client control-testing standard before an incident is closed
· Analyze and correlate signals across SIEM, EDR, and other platform logs to triage and validate threats
· Develop, maintain, and improve incident response playbooks and runbooks in partnership with the SOC's Analysis Champ and other capability owners
· Operate within existing automated workflows in ServiceNow SIR, following and refining established processes
· Flag detection gaps and false-positive patterns identified during live incidents to Detection Engineering for tuning and new detection development
· Use outputs from the Mate AI SOC platform to inform triage and investigation decisions
· Collaborate with Compliance, Legal, and Risk to ensure response workflows meet business and regulatory requirements
· Assess vulnerabilities, propose remediation, and stay current on emerging threats and countermeasures
· Provide training and mentorship to other incident responders on best practices
· Contribute to post-incident reviews and help build metrics that drive continuous program improvement - **Only those lawfully authorized to work in the designated country associated with the position will be considered.**
- **Please note that all Position start dates and duration are estimates and may be reduced or lengthened based upon a client’s business needs and requirements.**
Benefits:
For information and details on employment benefits offered with this position, please visit here. Should you have any questions/concerns, please contact our HR Department via our secure website.
California Pay Equity:
For information and details on pay equity laws in California, please visit the State of California Department of Industrial Relations' website here.
Rose International is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex, sexual orientation, gender (expression or identity), national origin, arrest and conviction records, disability, veteran status or any other characteristic protected by law. Positions located in San Francisco and Los Angeles, California will be administered in accordance with their respective Fair Chance Ordinances.
If you need assistance in completing this application, or during any phase of the application, interview, hiring, or employment process, whether due to a disability or otherwise, please contact our HR Department.
Rose International has an official agreement (ID #132522), effective June 30, 2008, with the U.S. Department of Homeland Security, U.S. Citizenship and Immigration Services, Employment Verification Program (E-Verify). (Posting required by OCGA 13/10-91.).
I have been very pleased with my experience with Rose International. Everyone that I encountered was very helpful and courteous.
Stephanie, Consultant
As a contractor, I have to say that Rose International was by far the best agency I have worked for.
Q'testdalir, Consultant
I am very happy with the Rose International, and the professionalism of the employees.
Robin, Consultant
You are customer service oriented. No matter whether it was the Recruiter or someone in Human Resources/Payroll, you were responsive. That to me is key!
Tonya, Consultant
Any time I did have a question and called, the phone was always answered, and my question/concern was immediately resolved.
Sally, Consultant
EMPLOYEE COMMENTS