Security Operations Engineer

West 4th Strategy•Washington, DC

1d•Onsite

About The Position

We need an experienced Security Operations Engineer at the National Indian Gaming Commission (NIGC). The NIGC is an independent federal agency within the Department of the Interior, established to promote tribal economic development, maintain the integrity of the Indian gaming industry, and ensure that tribes are the primary beneficiaries of their gaming activities. In this role, you will apply knowledge of information systems security principles, NIST guidelines, FISMA, CISA, and federal directives to conduct ongoing security assessments; ensure the effective configuration and daily operations of cybersecurity tools including SIEM, Syslog, NDR, EDR, firewalls, M365 Cloud security, Defender for Cloud, and CDM capabilities; develop Security Orchestration and Automation capabilities; execute Incident Response activities; perform regular threat hunting; and develop and maintain accurate security operations documentation. This is a full-time opportunity. We can offer a competitive salary, and a comprehensive benefits package.

Requirements

Minimum 6 years of continuous, hands-on experience in a similar role.
Demonstrated experience with the responsibilities defined above
US Citizenship - required

Nice To Haves

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field preferred.

Responsibilities

Apply knowledge and skills of information systems security principles, NIST guidelines, FISMA, CISA, and federal directives to conduct ongoing security assessments of installed systems and networks and recommend corrective actions.
Perform systems engineering and maintenance activities according to established standards.
Apply knowledge of networking technologies including LAN, MS Azure, and wireless management in security solutions implementation and troubleshooting.
Develop NIGC security operations capabilities by evaluating current strategies and pursuing alignment with best practices.
Ensure the effective configuration and daily operations of tools that support the NIGC cybersecurity strategy, including SIEM integration, Syslog, Network Detection and Response (NDR), Endpoint Detection and Response (EDR), firewalls, M365 Cloud security, Defender for Cloud, and Continuous Diagnostics and Mitigation (CDM) capabilities.
Collaborate with the CISO and Privacy Officer to develop plans, techniques, and measurable objectives to improve cybersecurity and privacy measures that meet NIGC goals for protecting sensitive information.
Collaborate with other teams on the integration of NIGC applications and IT services to consider security implications and ensure that NIGC security requirements are met.
Maintain threat awareness and monitor NIGC information systems for exploits and suspicious activities; analyze aggregated logs from security tools and perform regular threat hunting activities.
Develop Security Orchestration and Automation capabilities and detection and response configuration policies to increase automation.
Adhere to Continuous Monitoring practices to evaluate the effectiveness of implemented security controls and execute proactive threat hunting activities to ensure confidentiality, integrity, and availability of NIGC information systems.
Execute Incident Response activities to include all associated actions according to the NIGC incident response plan; develop incident handling procedures.
Validate that sufficient and relevant information is captured and retained from security tools to support actionable security awareness and incident investigations.
Collect security operations performance and NIGC security posture management metrics and prepare NIGC threat reports to inform risk management decisions.
Develop and maintain accurate security operations documentation including the preparation of standard operating procedures for recurring tasks.