Remote IT SOC Engineer I — Cyber Defense

ecsfederal; Virginia (MN); Hybrid; USD 100,000 - 120,000; Full time

Job summary

Everforth ECS is seeking an IT SOC Engineer I to work remotely, supporting the DFC CISO within the OIT. The role entails governance, risk management, compliance, security architecture, standards, and CSF-aligned monitoring and threat intel.

The position requires a Secret clearance, 3+ years in cybersecurity, and hands-on SOC experience with SIEMs and tools like Splunk and Defender. Salary range is $100,000–$120,000 with full benefits.

Qualifications

• Active Secret clearance required.
• 3+ years technical cybersecurity experience.
• 8570.01/8140.03 Cybersecurity certification (CompTIA Security+ CE).
• Experience mitigating security control vulnerabilities (STIG, NIST SP 800-53, RMF).
• Hands-on SOC operations experience in an enterprise environment.
• Experience with SIEM platforms for Tier 1 monitoring, triage and escalation.
• Experience managing and resolving SOC ticket queues.
• Experience phishing triage and investigations.
• Hands-on with Defender, Splunk, Security Onion, Absolute or similar.
• Ability to analyze alerts and follow incident response procedures.

Responsibilities

• Perform forensic analysis on digital media to identify and obfuscate incident content.
• Consult with security operations on cybersecurity communications and investigations.
• Provide expertise on adversary capabilities and assessments of CNE/CNA intentions.
• Conduct onsite and remote vulnerability assessments as a sustained program.
• Coordinate internal and external penetration testing to identify bypass methods.
• Filter and prioritize threat data into concise intelligence.
• Support SOC tools through research, testing, deployment, and maintenance.
• Advise SOC architecture activities for information systems initiatives.
• Create procedures for maintaining SOC hardware and software.
• Document security changes and assess impact on information systems.
• Oversee monitoring controls and remediation actions per POA&M.
• Update System Security Plan, SAR, and POA&Ms; report risk status.
• Work with DFC CIRT or external vendors during incidents.

Skills

Active Secret clearance

Cybersecurity

SOC operations

SIEM

Threat intelligence

Incident response

Tools

Splunk

Security Onion

Microsoft Defender

Absolute

Job description

Everforth ECS is seeking an IT SOC Engineer I to work remotely, supporting the DFC CISO within the OIT. The role entails governance, risk management, compliance, security architecture, standards, and CSF-aligned monitoring and threat intel.

The position requires a Secret clearance, 3+ years in cybersecurity, and hands-on SOC experience with SIEMs and tools like Splunk and Defender. Salary range is $100,000–$120,000 with full benefits.