Cleared SOC Engineer Mid Level- TS/SCI Clearance Required

HRB; Columbia (MD); On-site; USD 135,000 - 160,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

HSA Contributions

Life Insurance

Disability Insurance

Vacation & Holidays

401k Match

Administrative Time

Job summary

Tulzi Technologies, LLC (Tulzi) seeks a Cleared SOC Engineer Mid Level in Columbia, MD. TS/SCI clearance required. You will work with customers to design log management and SIEM solutions, and implement threat detection using tools like Splunk, Docker, and Security Onion.

The role emphasizes hands-on engineering, incident response support, signature development, and playbook creation, with opportunities to apply Python/Ansible scripting and contribute to a secure mission-ready environment.

Qualifications

• Minimum 2+ years of experience in information security.
• IAT Certification Level: CASP+, CISA, CISSP, GCIH, CEH, GIAC, GCIA, CCNP-Security and CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND.
• Vendor certifications: Microsoft, Cisco, Splunk, Linux, or related vendor certifications.
• Clearance Required: TS/SCI.

Responsibilities

• Determine log management and SIEM needs with the customer.
• Evaluate existing systems for improvements and gaps.
• Design and deploy new systems; upgrade existing systems as needed.
• Create and tune SIEM signatures/rules for attack detection.
• Assist in playbook development for alert triage and incident response.
• Define alert and threat detection metrics, statistics, and analytics.
• Support incident response and forensics operations as required.
• Author and maintain detection scripts and automation.

Skills

Python scripting

Ansible scripting

SOC/IR experience

Linux

Tools

Logstash

Podman

Docker

Splunk

Corelight

Security Onion

Windows OS

Red Hat Enterprise Linux

Job description

Cleared SOC Engineer Mid Level- TS/SCI Clearance Required

• Columbia, MD
• Information Technology

Tulzi Technologies, LLC (Tulzi) prides ourselves on an open, and honest culture in the workplace which builds a morale conducive to inspiring growth on our team, while balancing lifestyle by supporting personal and family goals with flexibility. Tulzi offers secure network systems and software engineering solutions in both public and private sectors. With certified expert consulting the team at Tulzi is able to address the customers mission, and follow through in the systems development life cycle.

Clearance Required: TS/SCI
Title: SOC Engineer, Mid Level
Location: Columbia, MD
Salary Range: $135-160/yr

Minimum Years of Experience: 2+

IAT Certification Level: CASP+, CISA, CISSP, GCIH, CEH, GIAC, GCIA, CCNP-Security and CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND.

Vendor Certification Required: Microsoft, Cisco, Splunk, Linux, or any other related vendor certification

Description:
The SOC Engineer works with the customer to determine log management and SIEM needs, evaluate existing systems, for improvements, gaps, and next generation architecture and design. Designs and deploys new systems and upgrades existing systems as needed to meet customer needs and protect systems from emerging threats. The SOC Engineer will identify gaps in malicious activity detection capabilities, create new signatures / rules to improve detection of malicious activity and test and tune existing signatures / rules to ensure low rate of false positives. SOC Engineer will assist in playbook development for alert triage and Incident Response. Define and implement alert and threat detection metrics, statistics, and analytics. Recommend new tools/technologies to improve network visibility. Support Incident Response and Forensic operations as required to include static/dynamic malware analysis and reverse engineering. Author and maintain scripts for threat detection and automation. Will be responsible for creating, modifying, tuning IDS signatures/SIEM Correlation Searches and/or other detection signatures.

SOC Engineer will have direct hands on experience with tools such as Logstash, Podman, Docker, Splunk, Corelight, Security Onion, Windows Operating System, and Red Hat Enterprise License.

2+ years of Experience working as an information security analyst or engineer. SOC experience is a plus

Preferred:

• Python and/or Ansible Scripting experience
• Prior military experience

We offer a competitive benefits and compensation package and FUN place to work! Benefits include, but not limited to:

Health and Wellness Benefits

• Medical Insurance (three CareFirst healthcare plans to choose from, Dental and Vision Insurance, 75% covered for employee/ 50% per dependant

• Health Savings Account (HSA) contributions $1500 individual/ $3000 family

Personal Insurance Benefits

• Company-paid Life Insurance and AD&D coverage

• Company-paid Short-term and Long-term Disability Insurance

Paid Leave

• Employees receive 20 days of vacation/10 holidays built into hourly rate/ 5 days of Administrativetime (currently used for snow, jury, bereavement)

Retirement

• Pre-tax 401k program including 6% company match

• 100% fully vested from eligibility date

*Eligible after 90 days of employment

Tulzi Technologies provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, pregnancy, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.