Cyber Secuirty Engineer

Noblis•Lanham, MD

10d•Onsite

About The Position

Noblis is hiring a Cyber Security Engineer to lead individual projects, people, or technical and functional solutions supporting a federal enterprise Security Operations Center. The role addresses advanced assignments with broad scope and impact, applying deep professional expertise and business knowledge across multiple technical or business areas. The engineer works under general supervision, exercises seasoned judgment autonomously, builds effective customer-service and project-support relationships, identifies needs proactively, and influences team- or department-level practices. The engineer will configure and maintain SIEM and security monitoring solutions protecting federal systems and data across cloud and on-premises environments. The position develops and tunes detection capabilities, investigates incidents, automates SOC workflows, documents security solutions, and works with partner teams to improve detection and response. Solutions must comply with applicable federal requirements, including NIST frameworks, FISMA, RMF, and Zero Trust Architecture guidelines. The role must be performed on-site at the client location in New Carrollton, Maryland, supporting a 24/7/365 SOC. Noblis and its subsidiaries provide scientific, engineering, and management expertise to federal missions. The organization describes its culture as collaborative and focused on meaningful work, employee well-being, and work-life balance. The projected full-time compensation range is $105,100 to $164,125 per year. Benefits and programs include health, life, disability, financial and retirement benefits, paid leave, professional development, tuition assistance, work-life programs, and performance recognition. Eligibility for benefit programs varies by employee category and hours worked.

Requirements

Bachelor's degree and 7 years of related experience.
Experience with Splunk ES/SOAR in an enterprise SOC environment.
Experience developing custom detection rules, correlation searches, and automated playbooks.
Knowledge of the NIST Cybersecurity Framework, NIST SP 800-53, FISMA, and RMF.
Recent IRS cybersecurity experience, such as experience within the last 2 years.
Ability to work on-site in New Carrollton, Maryland.

Nice To Haves

Active IRS Moderate Risk Background Investigation.
Cyber defense certification, such as CISSP or Splunk Certified Cybersecurity Defense Analyst.
Experience supporting federal cybersecurity operations.
Experience mapping detections to the MITRE ATT&CK framework for detection coverage analysis.
Experience mentoring junior cybersecurity staff and developing training materials.

Responsibilities

Engineer, configure, and maintain SIEM platforms and security monitoring tools for a 24/7/365 enterprise SOC protecting federal systems and data in cloud and on-premises environments.
Develop, test, and tune custom detection rules, correlation searches, and automated alert logic based on environment-specific user behavior, asset profiles, and threat patterns.
Investigate cybersecurity incidents by correlating security events, behavioral analytics, threat intelligence, and log data to identify threats, anomalies, and indicators of compromise.
Design and implement automated workflows and SOAR playbooks for incident triage, case enrichment, and escalation.
Develop and maintain engineering documentation, including design documents, configuration records, test plans, and architecture diagrams for SOC tools and security solutions.
Collaborate with threat intelligence, insider threat, and fraud analytics teams to develop detection capabilities integrating behavioral, identity, and network telemetry.
Create and maintain SOPs, desk guides, and playbooks; mentor junior engineers and analysts in detection development and investigative techniques.
Ensure cybersecurity solutions comply with NIST frameworks, federal security policies, and applicable mandates, including FISMA, RMF, and Zero Trust Architecture guidelines.
Lead individual projects, people, or technical and functional solutions; build relationships for customer service and project support; identify and communicate needs; and contribute to policy and procedure development.