Senior Security Engineer - SOC & Incident Response

Capgemini; McLean (VA); On-site; USD 95,000 - 105,000; Full time

Job summary

Capgemini Government Solutions (CGS) LLC is seeking a Security Engineer - Operational Support to monitor and respond to security events, support enterprise cybersecurity platforms, and collaborate with cross‑functional teams to strengthen security posture for aerospace and federal clients.

The role requires DoD Secret clearance eligibility, 5+ years in SOC or security engineering, strong TCP/IP, and familiarity with NIST, ISO 27001, CMMC, SOX, and PCI-DSS, with preference for SIEMs like Splunk,

Qualifications

• 5+ years of experience in a Security Operations Center (SOC) or security engineering role.
• Ability to obtain and maintain a DoD Secret security clearance.
• Experience supporting large enterprise cybersecurity operations.
• Strong knowledge of TCP/IP networking and incident response methodologies.

Responsibilities

• Monitor, maintain, and support enterprise security technologies (SIEM, IDS/IPS, vulnerability management, malware protection).
• Respond to security incidents and alerts in accordance with procedures.
• Triage requests from service management queues and engineering mailboxes.
• Configure and tune security tools, detections, and alerts.
• Troubleshoot security infrastructure and support audit, compliance, and governance activities.
• Support ITSM processes including incident, problem, and change management.
• Analyze network traffic and endpoint telemetry to identify threats.
• Develop and maintain security documentation, standards, and playbooks.

Skills

Security operations

Incident response

TCP/IP networking

Communication skills

U.S. Citizenship

Tools

Microsoft Sentinel

Splunk

QRadar

ArcSight

Microsoft Defender

CrowdStrike

Trellix

Nessus

Tenable

Qualys

Rapid7

Microsoft Azure

PowerShell

Python

KQL

Job description

Capgemini Government Solutions (CGS) LLC is seeking a Security Engineer - Operational Support to monitor and respond to security events, support enterprise cybersecurity platforms, and collaborate with cross‑functional teams to strengthen security posture for aerospace and federal clients.

The role requires DoD Secret clearance eligibility, 5+ years in SOC or security engineering, strong TCP/IP, and familiarity with NIST, ISO 27001, CMMC, SOX, and PCI-DSS, with preference for SIEMs like Splunk,