Senior SOC Engineer -TS/SCI Security Clearance Required

Power3 Solutions•Columbia, MD

1d•Onsite

About The Position

The Senior SOC Engineer works with the customer to determine log management and SIEM needs and evaluates existing systems for improvements, gaps, and next-generation architecture and design. The engineer designs and deploys new systems and upgrades existing systems to meet customer needs and protect systems from emerging threats. The role identifies gaps in malicious activity detection, creates signatures and rules to improve detection, and tests and tunes existing signatures and rules to reduce false positives. It also supports playbook development for alert triage and incident response; defines and implements alert and threat-detection metrics, statistics, and analytics; and recommends tools and technologies to improve network visibility. The engineer supports incident response and forensic operations as required, including static and dynamic malware analysis and reverse engineering. The role also authors and maintains scripts for threat detection and automation, and creates, modifies, and tunes IDS signatures, SIEM correlation searches, and other detection signatures. The position is based in Columbia, Maryland, and requires a TS/SCI security clearance.

Requirements

TS/SCI security clearance.
At least 4 years of experience working as an information security analyst or engineer.
IAT certification such as CASP+, CISA, CISSP, GCIH, CEH, GIAC, GCIA, CCNP-Security, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND.
A vendor certification in Microsoft, Cisco, Splunk, Linux, or another related vendor.
Hands-on experience with tools such as Logstash, Podman, Docker, Splunk, Corelight, Security Onion, Windows Operating System, and Red Hat Enterprise Linux.

Nice To Haves

SOC experience.
Python and/or Ansible scripting experience.
Prior military experience.

Responsibilities

Work with customers to determine log management and SIEM needs.
Evaluate existing systems to identify improvements, gaps, and next-generation architecture and design needs.
Design and deploy new systems and upgrade existing systems to meet customer needs and protect against emerging threats.
Identify gaps in malicious activity detection capabilities.
Create new signatures and rules to improve malicious activity detection, and test and tune existing signatures and rules to reduce false positives.
Assist with playbook development for alert triage and incident response.
Define and implement alert and threat-detection metrics, statistics, and analytics.
Recommend tools and technologies to improve network visibility.
Support incident response and forensic operations as required, including static and dynamic malware analysis and reverse engineering.
Author and maintain scripts for threat detection and automation.
Create, modify, and tune IDS signatures, SIEM correlation searches, and other detection signatures.

Benefits

Medical insurance with three CareFirst healthcare plans to choose from.
Dental insurance.
Vision insurance.
Employer-paid 75% of employee insurance premiums and 50% of dependent premiums.
Health Savings Account contributions of $1,500 for individuals or $3,000 for families.
Company-paid life insurance and AD&D coverage.
Company-paid short-term and long-term disability insurance.
20 days of vacation.
10 holidays built into the hourly rate.
5 days of administrative time, currently used for snow, jury duty, and bereavement.
Pre-tax 401(k) program with a 6% company match.
401(k) eligibility after 90 days of employment and full vesting from the eligibility date.
Competitive compensation package.