SOC Security Engineer

Revolutional, LLC • Memphis, TN

1d • $115,000 - $135,000 • Onsite

About The Position

Revolutional is seeking a SOC Engineer to engineer, deploy, maintain, and improve cybersecurity tools and capabilities supporting a Security Operations Center for a large federal agency across on-premises and cloud environments. The role develops and implements cybersecurity solutions; builds and tunes detections, analytics, dashboards, and automation; and translates security and business requirements into technical designs. The engineer helps keep SOC tools, sensors, and platforms integrated and maintained, improves detection quality, develops operational playbooks, and documents engineering work for operations and change control. The position is onsite at client facilities in New Carrollton, Maryland, or Memphis, Tennessee. It normally follows weekday core operational hours, but evening, overnight, weekend, or holiday shifts may be required during incidents or emergencies. A Public Trust clearance is required, and the candidate must be a U.S. citizen and able to obtain that clearance.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field.
• At least 3 years of relevant professional experience.
• Experience deploying, configuring, and maintaining SOC technologies such as SIEM, SOAR, EDR, IDS/IPS, and network sensors.
• Experience developing and tuning detection rules, analytics, and dashboards.
• Scripting or automation experience, such as Python, PowerShell, or Bash.
• Experience developing engineering documentation, including designs, test plans, and configuration records.
• Working knowledge of NIST SP 800-53 and security hardening practices.
• Must be a U.S. citizen and able to obtain a Public Trust clearance.

Nice To Haves

• Experience supporting federal government contracts as a contractor, including working to contract performance standards, deliverable schedules, and government review and approval processes.
• Experience with Splunk, Microsoft Sentinel, or similar SIEM content development.
• Experience with SOAR platforms and automation playbooks.
• Experience with change management processes.
• Certifications such as CompTIA Security+, CySA+, GIAC GCIA or GCDA, or vendor certifications.

Responsibilities

• Develop and implement cybersecurity solutions to protect systems and networks against potential threats.
• Research and pilot cybersecurity technologies, and investigate and resolve issues with cybersecurity solutions.
• Assist with configurations, validate secure complex systems, and test security products and systems to identify security weaknesses.
• Work with stakeholders to translate security and business requirements into technical designs.
• Develop mitigations in response to security incidents and evolving cyber threats.
• Support the architecture, strategy, research, evaluation, prototyping, integration, deployment, and sustainment of SOC tools, sensors, platforms, and enclaves.
• Ensure engineered solutions comply with client policies, standards, hardening guidelines, security requirements, and approved technical direction.
• Support integration and interoperability among SOC tools, sensors, data sources, platforms, workflows, applications, and related cybersecurity infrastructure.
• Create and maintain engineering documentation, including design documentation, configuration information, test plans, end-to-end configuration flow diagrams, deployment records, and operational handoff materials.
• Support technical change requests through the client’s Change Control Board or equivalent change management process.
• Assist the client in maintaining SOC tool, asset, software license, maintenance, support agreement, and inventory information.
• Develop, test, maintain, and document custom analytics, detections, dashboards, scripts, interfaces, and automation playbooks.
• Tune sensors, rules, alerts, and analytics to improve detection quality, reduce false positives, and support efficient SOC operations.
• Prototype and integrate approved SOC technologies and custom capabilities.
• Support the development and maintenance of automation, orchestration, and response playbooks.
• Validate custom capabilities before operational use and document results, dependencies, limitations, configuration requirements, and maintenance considerations.
• Recommend targeted improvements to SOC tools, workflows, detections, dashboards, scripts, and content based on operational findings and client priorities.
• Assist with creating cybersecurity standards and policies.

Benefits

• Traditional and HSA-eligible medical insurance plans.
• 100% employer-paid dental and vision insurance options.
• 100% employer-sponsored short-term disability, long-term disability, and life insurance.
• 5% 401(k) company matching.
• Flexible schedules and teleworking options.
• Paid holidays and PTO accrual plans.
• Paid parental leave.
• Professional development and career growth opportunities.
• Team and company-wide events, recognition, and appreciation.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level