Senior Security Operations Center (SOC) Engineer

IT Data Consulting, LLC; Reston (VA); On-site; USD 110,000 - 140,000; Full time

Job summary

IT Data Consulting, LLC is seeking a Senior Security Operations Center (SOC) Engineer to lead detection engineering, SIEM operations, threat hunting, and SOC tooling for a federal cybersecurity program.

The ideal candidate will have over 10 years of SOC engineering or security operations experience in enterprise environments and expertise with SIEM tools like Splunk. Responsibilities include engineering detection content and operating EDR platforms.

Qualifications

• 10+ years of senior SOC engineering or security operations experience in enterprise, federal, healthcare, or regulated environments.
• Hands-on SIEM and EDR platform experience.
• Detection engineering and security analytics expertise.

Responsibilities

• Engineer SIEM detection content, dashboards, and analytics.
• Lead threat hunting and IOC development.
• Operate EDR platforms and integrate with the SOAR pipeline.
• Coordinate with IR, VM, and ATO teams.

Skills

SIEM operations

Threat hunting

Security analytics

EDR platform operations

Incident response coordination

Education

Bachelor's degree

Tools

Splunk

Defender

CrowdStrike

Carbon Black

Job description

Senior Security Operations Center (SOC) Engineer

Overview

ITDC is seeking a Senior SOC Engineer to lead detection engineering, SIEM/EDR operations, threat hunting, and SOC tooling for a federal cybersecurity program.

Responsibilities

• Engineer SIEM (Splunk preferred) detection content, dashboards, and analytics.
• Lead threat hunting, IOC development, and adversary emulation.
• Operate EDR platforms (Defender, CrowdStrike, Carbon Black) and integrate with the SOAR pipeline.
• Coordinate with IR, VM, and ATO teams; provide expert testimony in major incidents.

Required Qualifications

• 10+ years of senior SOC engineering or security operations experience in enterprise, federal, healthcare, or regulated environments (derived).
• Hands-on SIEM (Splunk, Sentinel, QRadar, Elastic) and EDR platform experience.
• Detection engineering, threat hunting, and security analytics expertise.
• Bachelor's degree (derived); Splunk certification, GCIH, GCIA, GCFA, CISSP, or CySA+ preferred.

Desired Qualifications

• Federal SOC experience integrating with US-CERT/CISA reporting workflows.
• Cloud SOC experience (AWS GuardDuty, Security Hub, Sentinel).
• ML/UEBA tuning and false-positive reduction at scale.