Senior Cybersecurity Engineer, SOC & Detection

Noblis, Inc.; Lanham (MD); In loco; USD 105.000 - 164.000; Tempo pieno

Descrizione del lavoro

Noblis, Inc. seeks an experienced cybersecurity engineer to design, implement, and maintain security controls across federal systems, integrating detection and response capabilities within a 24/7 SOC environment.

You will lead SIEM configurations, develop custom detection rules, and collaborate with threat intelligence teams to strengthen the organization’s security posture. On-site in New Carrollton, MD is required.

Competenze

• Bachelor's degree with 7+ years of related experience.
• Experience with Splunk ES/SOAR in an enterprise SOC environment.
• Experience developing custom detection rules, correlation searches, and automated playbooks.
• Knowledge of NIST Cybersecurity Framework, NIST SP 800-53, FISMA, and RMF.
• Recent IRS Cyber experience (e.g., within the last 2 years).
• Ability to work on-site in New Carrollton, MD.

Mansioni

• Engineer, configure, and maintain SIEM platforms and security monitoring tools within a 24/7/365 enterprise SOC protecting federal systems and data across cloud and on premises environments.
• Develop, test, and tune custom detection rules, correlation searches, and automated alert logic calibrated to environment-specific user behaviors, asset profiles, and threat patterns.
• Investigate cybersecurity incidents by correlating security events, behavioral analytics, threat intelligence, and log data to identify threats, anomalies, and indicators of compromise.
• Design and implement automated workflows and SOAR playbooks to streamline incident triage, case enrichment, and escalation processes.
• Develop and maintain engineering documentation including design documents, configuration records, test plans, and architecture diagrams for all SOC tools and security solutions.
• Collaborate with threat intelligence, insider threat, and fraud analytics teams to develop detection capabilities that integrate behavioral, identity, and network telemetry.
• Create and maintain SOPs, desk guides, and playbooks while mentoring junior engineers and analysts on detection development and investigative techniques.
• Ensure all cybersecurity solutions comply with NIST frameworks, federal security policies, and applicable mandates including FISMA, RMF, and Zero Trust Architecture guidelines.

Conoscenze

Detection rule development

Correlation searches

Automated playbooks

NIST frameworks knowledge

IRS cyber experience

Formazione

Bachelor's degree with 7 years related experience

Strumenti

Splunk ES/SOAR

Descrizione del lavoro

Noblis, Inc. seeks an experienced cybersecurity engineer to design, implement, and maintain security controls across federal systems, integrating detection and response capabilities within a 24/7 SOC environment.

You will lead SIEM configurations, develop custom detection rules, and collaborate with threat intelligence teams to strengthen the organization’s security posture. On-site in New Carrollton, MD is required.