Senior Security Operations Center (SOC) Engineer

IT Data Consulting, LLC; Reston (VA); Sur place; USD 110 000 - 140 000; Plein temps

Résumé du poste

IT Data Consulting, LLC is seeking a Senior Security Operations Center (SOC) Engineer to lead detection engineering, SIEM operations, threat hunting, and SOC tooling for a federal cybersecurity program.

The ideal candidate will have over 10 years of SOC engineering or security operations experience in enterprise environments and expertise with SIEM tools like Splunk. Responsibilities include engineering detection content and operating EDR platforms.

Qualifications

• 10+ years of senior SOC engineering or security operations experience in enterprise, federal, healthcare, or regulated environments.
• Hands-on SIEM and EDR platform experience.
• Detection engineering and security analytics expertise.

Responsabilités

• Engineer SIEM detection content, dashboards, and analytics.
• Lead threat hunting and IOC development.
• Operate EDR platforms and integrate with the SOAR pipeline.
• Coordinate with IR, VM, and ATO teams.

Connaissances

SIEM operations

Threat hunting

Security analytics

EDR platform operations

Incident response coordination

Formation

Bachelor's degree

Outils

Splunk

Defender

CrowdStrike

Carbon Black

Description du poste

Senior Security Operations Center (SOC) Engineer

Overview

ITDC is seeking a Senior SOC Engineer to lead detection engineering, SIEM/EDR operations, threat hunting, and SOC tooling for a federal cybersecurity program.

Responsibilities

• Engineer SIEM (Splunk preferred) detection content, dashboards, and analytics.
• Lead threat hunting, IOC development, and adversary emulation.
• Operate EDR platforms (Defender, CrowdStrike, Carbon Black) and integrate with the SOAR pipeline.
• Coordinate with IR, VM, and ATO teams; provide expert testimony in major incidents.

Required Qualifications

• 10+ years of senior SOC engineering or security operations experience in enterprise, federal, healthcare, or regulated environments (derived).
• Hands-on SIEM (Splunk, Sentinel, QRadar, Elastic) and EDR platform experience.
• Detection engineering, threat hunting, and security analytics expertise.
• Bachelor's degree (derived); Splunk certification, GCIH, GCIA, GCFA, CISSP, or CySA+ preferred.

Desired Qualifications

• Federal SOC experience integrating with US-CERT/CISA reporting workflows.
• Cloud SOC experience (AWS GuardDuty, Security Hub, Sentinel).
• ML/UEBA tuning and false-positive reduction at scale.