Senior SOC Engineer - Lead 24x7 Security Operations

Revolutional; Memphis (TN); Vor Ort; USD 140.000 - 190.000; Vollzeit

Jobbeschreibung

Location: Onsite - New Carrollton, MD or Memphis, TN

Terms: Full-time

Clearance: Public Trust

Travel: 0% (onsite presence at client facilities as directed)

Position Description

We are seeking a Senior SOC/Security Engineer to serve as task lead for SOC engineering, deployment, operations, and maintenance in a 24x7x365 Security Operations Center (SOC) supporting a large federal agency. This seasoned subject matter expert supports the engineering, deployment, configuration, operation, maintenance, integration, and sustainment of SOC tools, sensors, platforms, enclaves, and supporting cybersecurity capabilities, leads the SOC engineers performing this work, and develops solutions to undefined, complex technical problems.

The successful candidate will:

• Lead engineering and sustainment of SOC tools, sensors, and platforms.
• Keep security infrastructure compliant, integrated, and well documented.
• Drive research and prototyping of new SOC technologies.
• Mentor SOC engineers and administrators.

Responsibilities:

• Serve as task lead for SOC engineering, deployment, operations, and maintenance, assigning and reviewing the work of SOC engineers.
• Support cybersecurity architecture, strategy, research, evaluation, prototyping, integration, deployment, and sustainment of SOC technologies.
• Deploy, configure, operate, maintain, and troubleshoot approved SOC tools, sensors, platforms, enclaves, and related cybersecurity technologies.
• Ensure engineered solutions comply with client policies, standards, hardening guidelines, security requirements, and approved technical direction.
• Support integration and interoperability of SOC tools, sensors, data sources, platforms, workflows, applications, and related infrastructure.
• Create and maintain engineering documentation, including design documentation, configuration information, test plans, diagrams, deployment records, and operational handoff materials.
• Support technical change requests through the client's Change Control Board or equivalent change management process.
• Assist the client with maintaining SOC tool, asset, software license, maintenance, support agreement, and inventory information.

Required Skills and Experience

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field and 10+ years of relevant professional experience; three (3) years of additional relevant experience may be substituted in lieu of a degree.
• Extensive expertise in the technical domain area, with expert knowledge of and ability to apply advanced technical principles, theories, and concepts.
• Ability to develop solutions to undefined, complex technical issues and problems that impact multiple areas or disciplines.
• Demonstrated ingenuity and creativity in developing new technical solutions and systems to achieve functional objectives.
• Expert experience engineering and sustaining enterprise SOC technologies (e.g., SIEM, SOAR, EDR, IDS/IPS, network sensors) in large environments.
• Experience with change management and configuration management processes.
• Working knowledge of NIST SP 800-53 and security hardening standards.
• Experience leading a team or serving as a task lead, including assigning work, reviewing quality, and reporting status to client leadership.
• Experience supporting federal government contracts as a contractor, including working to contract performance standards, deliverable schedules, and government review and approval processes.
• Certifications such as CISSP, GIAC (GCIA, GCED), or vendor engineering certifications.
• Experience with hybrid on-premises and cloud (AWS, Azure) SOC environments.
• Scripting and automation skills (Python, PowerShell, Ansible).

Work Authorization/Clearance: Must be a U.S. Citizen and able to obtain a Public Trust clearance.