Senior Analyst (SOC Engineer)

Tyger Solutions Corporation; Ruston (WA); Hybrid; USD 130,000 - 185,000; Full time

Job summary

Tyger Solutions Corporation is seeking a Senior Analyst (SOC Engineer) to support a federal client’s security operations. The role involves assessing security controls, implementing protective measures, and remediating findings from testing.

This is a senior, hands-on position with cross-team collaboration across SOC engineering and compliance. You will turn findings from tools and NIST SP 800-53 assessments into fixes that hold up under testing, advise system owners on remediation vs risk

Qualifications

• Bachelor's degree in a relevant technology field.
• 7+ years of technical experience in cybersecurity.
• Experience assessing security controls based on cybersecurity principles and tenets, such as STIG, NIST SP 800-53, and the Cybersecurity Framework.
• Experience implementing security measures to resolve vulnerabilities, mitigate risks, and recommend security changes to systems or system components.
• Experience implementing system security measures to ensure confidentiality, integrity, availability, authentication, and non-repudiation.
• Experience mitigating or correcting security deficiencies identified during security or certification testing, and recommending risk acceptance where appropriate.
• Eligibility for a Non-Critical Sensitive position, with a favorably adjudicated Tier 3 (T3) investigation.

Responsibilities

• Assess security controls against cybersecurity principles and standards, including NIST SP 800-53 and the NIST Cybersecurity Framework.
• Implement security measures to resolve vulnerabilities and mitigate risk; recommend security changes to systems and components.
• Implement system security measures to ensure confidentiality, integrity, availability, authentication, and non-repudiation.
• Mitigate and correct security deficiencies identified during security and certification testing; recommend risk acceptance with documented rationale.
• Engineer, tune, and maintain SOC tooling such as SIEM, endpoint detection, and vulnerability scanning platforms.
• Onboard log sources and build detection content, dashboards, and alerts to support monitoring and incident response.
• Track findings through to closure, including POA&M entries, remediation evidence, and status reporting to system owners.
• Document configurations, procedures, and engineering decisions so changes are repeatable and auditable.
• Mentor junior analysts and serve as a technical escalation point for the SOC team.

Skills

SOC engineering

Security controls

Vulnerability management

Threat detection

Technical mentoring

Education

Bachelor's degree

Tools

Splunk

Microsoft Sentinel

Elastic

Qualys

SCAP Compliance Checker

STIG Viewer

ScubaGear

Job description

Tyger Solutions Corporation (TSC) is hiring a Senior Analyst (SOC Engineer) to support a federal client's security operations. The role assesses security controls, implements protective measures, and corrects deficiencies found during security and certification testing.

This is a senior, hands‑on position. You will work across SOC engineering and compliance, turning findings from tools and NIST SP 800-53 assessments into fixes that hold up under testing. You will also advise system owners on when to remediate and when to recommend risk acceptance.

This position is hybrid and will require the candidate to be in Washington DC 1-3 days a week.

Key responsibilities

• Assess security controls against cybersecurity principles and standards, including NIST SP 800-53 and the NIST Cybersecurity Framework.


• Implement security measures that resolve vulnerabilities and mitigate risk, and recommend security changes to systems and system components.


• Implement system security measures in line with established procedures to ensure confidentiality, integrity, availability, authentication, and non-repudiation.


• Mitigate and correct security deficiencies identified during security and certification testing, or recommend risk acceptance with a documented rationale.


• Engineer, tune, and maintain SOC tooling such as SIEM, endpoint detection, and vulnerability scanning platforms.


• Onboard log sources and build detection content, dashboards, and alerts that support monitoring and incident response.


• Track findings through to closure, including POA&M entries, remediation evidence, and status reporting to system owners.


• Document configurations, procedures, and engineering decisions so that changes are repeatable and auditable.


• Mentor junior analysts and serve as a technical escalation point for the SOC team.

Required qualifications

• Bachelor's degree in a relevant technology field.


• 7+ years of technical experience in cybersecurity.


• Experience assessing security controls based on cybersecurity principles and tenets, such as STIG, NIST SP 800-53, and the Cybersecurity Framework.


• Experience implementing security measures to resolve vulnerabilities, mitigate risks, and recommend security changes to systems or system components.


• Experience implementing system security measures in accordance with established procedures to ensure confidentiality, integrity, availability, authentication, and non-repudiation.


• Experience mitigating or correcting security deficiencies identified during security or certification testing, and recommending risk acceptance where appropriate.


• Eligibility for a Non-Critical Sensitive position, with a favorably adjudicated Tier 3 (T3) investigation.

Preferred qualifications

• One or more relevant certifications, such as CISSP, CISM, GCIA, GCIH, CySA+, or Security+.


• Hands‑on experience with a SIEM platform such as Splunk, Microsoft Sentinel, or Elastic.


• Experience with vulnerability and compliance scanning tools such as Qualys and ScubaGear, and STIG tooling such as SCAP Compliance Checker and STIG Viewer.


• Familiarity with the NIST Risk Management Framework and the ATO process, including POA&M management.


• Scripting ability in Python, PowerShell, or Bash for automation and data analysis.


• Prior experience supporting a federal agency SOC or security engineering team.


• Clear written communication, including findings, remediation plans, and risk recommendations for non-technical stakeholders.