Cyber Engineer - SOC Engineering Support

Qbe•Haymarket, VA

2d•Remote

About The Position

QBE, LLC is seeking a Cyber Engineer - SOC Engineering Support to provide engineering, integration, automation, and technical support for NIH/OD-OIT security operations capabilities. This position is primarily remote with some TDY required.

Requirements

Associate degree in cybersecurity, information technology, computer science, information systems, business, communications, or a related field, or an additional two or more years of relevant experience in place of the degree requirement.
At least 8 years of relevant experience aligned to the responsibilities of this position.
Experience supporting technologies used in enterprise SOC environments.
Strong understanding of security telemetry, logging, detection, and monitoring.
Experience troubleshooting integrations and complex technical systems.
CompTIA Security+ certification.
Systems Security Certified Practitioner (SSCP) certification.
Ability to obtain and maintain the required federal background investigation, Public Trust determination, or security clearance associated with the position.

Nice To Haves

Experience with SIEM, SOAR, EDR, IDS/IPS, and threat intelligence integrations.
Scripting or automation experience.
Federal SOC engineering experience.

Responsibilities

Engineer and maintain technologies supporting SOC operations.
Integrate log sources, security sensors, endpoint platforms, and monitoring systems.
Develop and optimize SIEM use cases, parsers, correlation rules, and alerts.
Support SOAR workflows and security automation.
Troubleshoot data ingestion, connectivity, and platform performance issues.
Work with analysts to improve detection quality and reduce false positives.
Develop scripts and technical integrations supporting security operations.
Maintain configuration documentation and engineering procedures.
Test and deploy enhancements to SOC technologies.
Provide engineering support during significant cybersecurity incidents.