Cleared SOC Engineer (TS/SCI) - Mid Level

HRB; Columbia (MD); Presencial; USD 135 000 - 160 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Medical Insurance

Dental Insurance

Vision Insurance

HSA Contributions

Life Insurance

Disability Insurance

Vacation & Holidays

401k Match

Administrative Time

Resumo da oferta

Tulzi Technologies, LLC (Tulzi) seeks a Cleared SOC Engineer Mid Level in Columbia, MD. TS/SCI clearance required. You will work with customers to design log management and SIEM solutions, and implement threat detection using tools like Splunk, Docker, and Security Onion.

The role emphasizes hands-on engineering, incident response support, signature development, and playbook creation, with opportunities to apply Python/Ansible scripting and contribute to a secure mission-ready environment.

Qualificações

• Minimum 2+ years of experience in information security.
• IAT Certification Level: CASP+, CISA, CISSP, GCIH, CEH, GIAC, GCIA, CCNP-Security and CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND.
• Vendor certifications: Microsoft, Cisco, Splunk, Linux, or related vendor certifications.
• Clearance Required: TS/SCI.

Responsabilidades

• Determine log management and SIEM needs with the customer.
• Evaluate existing systems for improvements and gaps.
• Design and deploy new systems; upgrade existing systems as needed.
• Create and tune SIEM signatures/rules for attack detection.
• Assist in playbook development for alert triage and incident response.
• Define alert and threat detection metrics, statistics, and analytics.
• Support incident response and forensics operations as required.
• Author and maintain detection scripts and automation.

Conhecimentos

Python scripting

Ansible scripting

SOC/IR experience

Linux

Ferramentas

Logstash

Podman

Docker

Splunk

Corelight

Security Onion

Windows OS

Red Hat Enterprise Linux

Descrição da oferta de emprego

Tulzi Technologies, LLC (Tulzi) seeks a Cleared SOC Engineer Mid Level in Columbia, MD. TS/SCI clearance required. You will work with customers to design log management and SIEM solutions, and implement threat detection using tools like Splunk, Docker, and Security Onion.

The role emphasizes hands-on engineering, incident response support, signature development, and playbook creation, with opportunities to apply Python/Ansible scripting and contribute to a secure mission-ready environment.