Senior SOC Engineer — Lead Detection & Automation

Revolutional, LLC; New Carrollton (MD); Presencial; USD 135.000 - 170.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health insurance

Dental and vision insurance

401(k) matching

Paid holidays and PTO

Parental leave

Professional development

Teleworking options

Descripción de la vacante

Revolutional is seeking a Senior SOC Engineer to lead the engineering, deployment, and improvement of cybersecurity tools for a large federal agency across on‑premises and cloud environments. The role focuses on detections, automation, policy development, and securing SOC operations while adhering to client standards.

The ideal candidate will have 7+ years of experience, proficiency with SIEM/SOAR/EDR, and strong scripting abilities.

Formación

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field.
• 7+ years of relevant professional experience.
• Deep experience engineering, integrating, and sustaining enterprise SOC technologies such as SIEM, SOAR, EDR, IDS/IPS, and network sensors.
• Experience leading detection engineering, including developing, validating, and tuning detections and analytics.
• Experience developing automation, orchestration, and response playbooks.
• Experience translating security and business requirements into technical designs with stakeholders.
• Experience developing and maintaining cybersecurity standards, policies, and engineering documentation.
• Strong scripting and automation skills (e.g., Python, PowerShell).
• Working knowledge of NIST CSF, NIST SP 800-53, and the MITRE ATT&CK framework.

Responsabilidades

• Lead engineering and architecture of SOC tools, sensors, platforms, and enclaves.
• Drive detection engineering that measurably improves detection quality.
• Own cybersecurity standards and policies for SOC engineering.
• Evaluate and prototype new SOC technologies.
• Promote cybersecurity awareness and share expertise with other engineers.
• Develop and implement cybersecurity solutions to protect systems and networks against potential threats.
• Research and pilot new cybersecurity technologies, and investigate and resolve cybersecurity solution issues.
• Assist with configurations, validate secure complex systems, and test security products and systems to detect security weaknesses.
• Interface with stakeholders in the strategic design process to translate security and business requirements into technical designs.
• Develop mitigations in response to security incidents and evolving cyber threats.
• Support cybersecurity architecture, strategy, research, evaluation, prototyping, integration, deployment, and sustainment of SOC tools, sensors, platforms, and enclaves.
• Ensure engineered solutions comply with client policies, standards, hardening guidelines, security requirements, and approved technical direction.
• Support integration and interoperability of SOC tools, sensors, data sources, platforms, workflows, applications, and related cybersecurity infrastructure.
• Create and maintain engineering documentation, including design documentation, configuration information, test plans, end-to-end configuration flow diagrams, deployment records, and operational handoff materials.
• Support technical change requests through the client’s Change Control Board or equivalent change management process.
• Assist the client with maintaining SOC tool, asset, software license, maintenance, support agreement, and inventory information.
• Develop, test, maintain, and document custom analytics, detections, dashboards, scripts, interfaces, and automation playbooks.
• Perform sensor, rule, alert, and analytics tuning to improve detection quality, reduce false positives, and support efficient SOC operations.
• Prototype and integrate approved SOC technologies and custom capabilities.
• Support development and maintenance of automation, orchestration, and response playbooks.
• Validate custom capabilities before operational use and document results, dependencies, limitations, configuration requirements, and maintenance considerations.
• Recommend targeted improvements to SOC tools, workloads, detections, dashboards, scripts, and content based on operational findings and client priorities.
• Develop and maintain cybersecurity standards and policies.
• Promote cybersecurity awareness across technical teams and stakeholders.
• Review engineering designs, detections, and documentation for quality and compliance.

Conocimientos

SOC engineering

Detection engineering

Scripting

Stakeholder collaboration

NIST CSF familiarity

Educación

Bachelor’s degree in Cybersecurity or related field

Herramientas

SIEM

SOAR

EDR

IDS/IPS

Network sensors

Descripción del empleo

Revolutional is seeking a Senior SOC Engineer to lead the engineering, deployment, and improvement of cybersecurity tools for a large federal agency across on‑premises and cloud environments. The role focuses on detections, automation, policy development, and securing SOC operations while adhering to client standards.

The ideal candidate will have 7+ years of experience, proficiency with SIEM/SOAR/EDR, and strong scripting abilities.