Cyber Secuirty Engineer

Noblis; Lanham (MD); On-site; USD 105,000 - 164,000; Full time

Job summary

Noblis, Inc. seeks an experienced cybersecurity engineer to design, implement, and maintain security controls across federal systems, integrating detection and response capabilities within a 24/7 SOC environment.

You will lead SIEM configurations, develop custom detection rules, and collaborate with threat intelligence teams to strengthen the organization’s security posture. On-site in New Carrollton, MD is required.

Qualifications

• Bachelor's degree with 7+ years of related experience.
• Experience with Splunk ES/SOAR in an enterprise SOC environment.
• Experience developing custom detection rules, correlation searches, and automated playbooks.
• Knowledge of NIST Cybersecurity Framework, NIST SP 800-53, FISMA, and RMF.
• Recent IRS Cyber experience (e.g., within the last 2 years).
• Ability to work on-site in New Carrollton, MD.

Responsibilities

• Engineer, configure, and maintain SIEM platforms and security monitoring tools within a 24/7/365 enterprise SOC protecting federal systems and data across cloud and on premises environments.
• Develop, test, and tune custom detection rules, correlation searches, and automated alert logic calibrated to environment-specific user behaviors, asset profiles, and threat patterns.
• Investigate cybersecurity incidents by correlating security events, behavioral analytics, threat intelligence, and log data to identify threats, anomalies, and indicators of compromise.
• Design and implement automated workflows and SOAR playbooks to streamline incident triage, case enrichment, and escalation processes.
• Develop and maintain engineering documentation including design documents, configuration records, test plans, and architecture diagrams for all SOC tools and security solutions.
• Collaborate with threat intelligence, insider threat, and fraud analytics teams to develop detection capabilities that integrate behavioral, identity, and network telemetry.
• Create and maintain SOPs, desk guides, and playbooks while mentoring junior engineers and analysts on detection development and investigative techniques.
• Ensure all cybersecurity solutions comply with NIST frameworks, federal security policies, and applicable mandates including FISMA, RMF, and Zero Trust Architecture guidelines.

Skills

Detection rule development

Correlation searches

Automated playbooks

NIST frameworks knowledge

IRS cyber experience

Education

Bachelor's degree with 7 years related experience

Tools

Splunk ES/SOAR

Job description

Responsibilities

Professionals in cybersecurity engineering are responsible for designing, implementing, and maintaining security controls and solutions to protect information systems and assets from cyber threats within organizations. They utilize their expertise in cybersecurity principles, network security, and secure coding practices to develop robust and resilient security architectures and defenses. Typical responsibilities include conducting risk assessments and security audits to identify vulnerabilities and assess security posture, designing and implementing security controls and countermeasures to mitigate risks and threats, and integrating security features and mechanisms into software, applications, and infrastructure components. Cybersecurity engineering roles also involve monitoring and analyzing security logs and alerts to detect and respond to security incidents and breaches, and collaborating with cross-functional teams to address security requirements and priorities in system development and operations. Additionally, professionals may be involved in security testing and validation, such as penetration testing and security code reviews, to identify and remediate security weaknesses and ensure compliance with security standards and regulations. Their expertise in areas such as encryption, access control, and threat intelligence enables organizations to establish and maintain a strong cybersecurity posture, protect sensitive data and assets, and mitigate cyber risks effectively.

You are responsible for leading individual projects, people, or technical/functional solutions. As an employee, you: Work on advanced problems or assignments of large scope, impact, and importance, applying broad and deep knowledge of professional specialty and business dynamics. Work on assignments in multiple business or technical areas; apply advanced concepts and understanding of policies, procedures, and techniques. Build and maintain effective relationships for customer service and project support; demonstrate initiative and proactively identify and communicate needs. Influence at the team or department level; participate in policy and procedure development. Receive general supervision, apply seasoned judgment autonomously.

• Engineer, configure, and maintain SIEM platforms and security monitoring tools within a 24/7/365 enterprise Security Operations Center protecting federal systems and data across cloud and on premises environments.
• Develop, test, and tune custom detection rules, correlation searches, and automated alert logic calibrated to environment specific user behaviors, asset profiles, and threat patterns.
• Investigate cybersecurity incidents by correlating security events, behavioral analytics, threat intelligence, and log data to identify threats, anomalies, and indicators of compromise.
• Design and implement automated workflows and SOAR playbooks to streamline incident triage, case enrichment, and escalation processes.
• Develop and maintain engineering documentation including design documents, configuration records, test plans, and architecture diagrams for all SOC tools and security solutions.
• Collaborate with threat intelligence, insider threat, and fraud analytics teams to develop detection capabilities that integrate behavioral, identity, and network telemetry.
• Create and maintain SOPs, desk guides, and playbooks while mentoring junior engineers and analysts on detection development and investigative techniques.
• Ensure all cybersecurity solutions comply with NIST frameworks, federal security policies, and applicable mandates including FISMA, RMF, and Zero Trust Architecture guidelines.

All applicants will need to be able to work on-site at the client location in New Carrollton, MD.

Required Qualifications

• Bachelor's degree with 7 years of related experience
• Experience with Splunk ES/SOAR in an enterprise SOC environment
• Experience developing custom detection rules, correlation searches, and automated playbooks
• Knowledge of NIST Cybersecurity Framework, NIST SP 800 53, FISMA, and RMF
• Recent IRS Cyber experience (ex. within the last 2 years)
• Ability to work on-site in New Carrollton, MD.

Desired Qualifications

• Active IRS Moderate Risk Background Investigation
• Cyber defense certification such as: CISSP, Splunk Certified Cybersecurity Defense Analyst
• Experience supporting federal cybersecurity operations
• Experience with MITRE ATT&CK framework mapping for detection coverage analysis
• Experience mentoring junior cybersecurity staff and developing training materials

Overview

Noblis and our wholly owned subsidiaries, Noblis ESI and Noblis MSD, take on some of the nation’s toughest challenges, delivering advanced solutions to our customers’ most critical missions. We bring together leading scientific, engineering, and management expertise in a culture grounded in objectivity and collaboration, ensuring our work creates lasting impact across federal missions.

We work with a broad range of government agencies in the defense, intelligence, and federal civilian sectors. Learn more and find opportunities at careers.noblis.org

At Noblis, we share a passion for excellence and innovation, and we create an environment where people can do meaningful work while maintaining the balance that keeps them energized and fulfilled. We seek out individuals with a natural curiosity and desire to collaborate and learn. We believe our people are our greatest strength, and we consistently seek exceptionally skilled, mission‑driven professionals who care deeply about doing work that enriches lives and makes our nation safer.

Noblis has earned numerous workplace awards for our culture, our commitment to employee well‑being, and our dedication to meaningful, impactful work. We also maintain a drug‑free workplace.

Remote/hybrid status is subject to change based on Noblis and/or government requirements.

Why Work at Noblis

At Noblis, we share a passion for excellence and innovation, and we create an environment where people can do meaningful work while maintaining the balance that keeps them energized and fulfilled. We seek out individuals with a natural curiosity and desire to collaborate and learn. We believe our people are our greatest strength, and we consistently seek exceptionally skilled, mission‑driven professionals who care deeply about doing work that enriches lives and makes our nation safer.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to race, color, ethnicity, sex, age, national origin, religion, physical or mental disability, pregnancy/childbirth and related medical conditions, veteran or military status, or any other characteristics protected by applicable federal, state, or local law.

If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact us.

EEO is the Law|E-Verify|Right to Work

Total Rewards

At Noblis we recognize and reward your contributions, provide you with growth opportunities, and support your total well‑being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, and work‑life programs. Our award programs acknowledge employees for exceptional performance and superior demonstration of our service standards. Full‑time and part‑time employees working at least 20 hours a week on a regular basis are eligible to participate in our benefit programs. Other offerings may be provided for employees not within this category. We encourage you to learn more about our total benefits by visiting the Benefits page on our Careers site.

Compensation at Noblis is determined by various factors, including but not limited to, the combination of education, certifications, knowledge, skills, competencies, and experience, internal and external equity, location, clearance level, as well as contract‑specific affordability, organizational requirements and applicable employment laws. The projected compensation range for this positionis based on full time status. For part time or on‑call staff, compensation is proportionately adjusted based on hours worked. While monetary compensation is important, it's just one component of Noblis’ total compensation package.

Posted Salary Range

USD $105,100.00 - USD $164,125.00 /Yr.