(3 to 5 years of experience)
Type: Full Time Employee (FTE)
Roles and Responsibilities:
- Monitor and analyze security alerts generated by SIEM platforms including Elastic SIEM, Microsoft Sentinel, and other SIEM tools (e.g., Wazuh, Splunk, QRadar).
- Perform continuous security monitoring of network traffic, endpoint activity, and system logs to identify suspicious or malicious behavior.
- Investigate potential security incidents by performing detailed log analysis to detect anomalies and attack patterns.
- Classify security alerts accurately as True Positive or False Positive based on evidence and analysis.
- Respond to security incidents promptly by following defined incident response playbooks and SOPs.
- Escalate confirmed or high-severity incidents to senior SOC engineers with proper documentation, context, and impact analysis.
- Conduct phishing email analysis, including:
o Header and sender analysis
o URL and attachment inspection
o Identification of credential-harvesting and malware delivery attempts
- Track and investigate malware alerts, performing basic static and behavioral analysis using EDR telemetry and sandbox results.
- Monitor and analyze endpoint activity using EDR tools such as Sentinel One and Microsoft Defender for Endpoint.
- Support vulnerability assessment activities by reviewing scan results, validating findings, and assisting with remediation tracking.
- Maintain accurate incident reports, investigation notes, and SOC documentation.
- Follow daily threat intelligence updates and apply relevant insights to ongoing investigations.
- Adherent to SOC SLAs, escalation procedures, and operational best practices
- Support client Baseline Security Reviews by reviewing security tool configurations and documenting gaps against defined security baselines.
Technology skills and Competencies:
- Basic to intermediate understanding of networking, security, and system administration concepts.
- Knowledge of:
- Network security fundamentals
- Firewalls, IDS/IPS, and SIEM to
- Vulnerability assessment concepts and security best practices
- Familiarity with Windows and/or Linux environments.
- Hands-on exposure to:
- SIEM monitoring and alert investigation
- Incident response and alert triage
- Endpoint detection and response (EDR) tools •
- Understanding of common attack techniques including phishing, malware, brute force, and credential abuse.
Certifications:
- CEH (Certified Ethical Hacker)
- Microsoft SC-200 - Security Operations Analyst
- Microsoft SC-900 or equivalent security fundamentals certification
Qualifications and experience:
- Bachelor's degree in computer science, Information Security, Information Technology, or a related field (or equivalent practical experience).
- Exposure to SOC operations
- Exposure to Cybersecurity monitoring
- Hands-on experience with SIEM tools and security alert investigation is preferred.
Skills Required
- 3 to 5 years of experience in SOC operations or cybersecurity monitoring
- Bachelor's degree in computer science, information security, information technology, or a related field, or equivalent practical experience
- Basic to intermediate understanding of networking, security, and system administration concepts
- Knowledge of network security fundamentals, firewalls, IDS/IPS, SIEM, vulnerability assessment, and security best practices
- Familiarity with Windows and/or Linux environments
- Hands-on exposure to SIEM monitoring, alert investigation, incident response, and alert triage
- Hands-on exposure to endpoint detection and response tools
- Understanding of phishing, malware, brute-force attacks, and credential abuse
- CEH certification
- Microsoft SC-200 Security Operations Analyst certification
- Microsoft SC-900 or equivalent security fundamentals certification
- Hands-on experience with SIEM tools and security alert investigation
What the Team is Saying
.jpeg)
.jpeg)
Wipfli Compensation & Benefits Highlights
-
Leave & Time Off Breadth — Flexible Time Off (unlimited-style PTO) and a broad menu of days off—such as wellness/floating days, paid volunteer time, and even sabbaticals—are highlighted across many roles. Hybrid/remote options further enable practical flexibility in scheduling time away.
-
Parental & Family Support — Generous paid family leave is paired with family-formation benefits including adoption, surrogacy, and fertility services, plus medical travel and gender-affirming care. These offerings signal strong support for a wide range of family needs.
-
Retirement Support — A 401(k) with company match alongside profit-sharing contributions is consistently advertised in current job materials. This pairing strengthens long-term savings beyond standard retirement plans.
Wipfli Insights
What We Do
Wipfli is a leading national advisory and accounting firm with nearly 100 years of serving ambitious middle-market organizations. We understand our clients' unique challenges and help them succeed on their terms through assurance, tax, advisory, outsourcing and technology services. With 2,900+ associates and global alliances, we combine national capabilities with local relationships. "Wipfli" is the brand name under which Wipfli LLP and Wipfli Advisory LLC and its respective subsidiary entities provide professional services. Wipfli LLP and Wipfli Advisory LLC (and its respective subsidiary entities) practice in an alternative practice structure in accordance with the AICPA Code of Professional Conduct and applicable law, regulations, and professional standards. Wipfli LLP is a licensed independent CPA firm that provides attest services to its clients, and Wipfli Advisory LLC provides tax and business consulting services to its clients. Wipfli Advisory LLC and its subsidiary entities are not licensed CPA firms.
Why Work With Us
At Wipfli, people count. Our people are core to everything we do — the catalyst behind our ability to create exceptional impact and extraordinary results. We believe in flexibility. We focus on relationships. We encourage each individual to follow their own path. And we seek feedback openly, from all.
Gallery
Wipfli Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.
Freedom to work from anywhere! Wipfli takes a flexible approach in allowing employees to choose to be remote, hybrid, or in-office.
