Senior SOC Engineer - SIEM, Detection & Automation

Amentum; Columbia (AL); On-site; USD 145,000 - 190,000; Full time

Benefits offered by this job

Health, dental, vision insurance

Paid time off & holidays

401(k) matching

Educational reimbursement

Parental leave

Employee stock purchase plan

Life & disability insurance

Pet insurance

Job summary

Amentum is seeking a highly skilled SOC Engineer to design, deploy, and continually improve enterprise SIEM and security monitoring across classified environments. You will own log pipelines, detections, automation, incident response, and cross-team collaboration to strengthen cyber defense capabilities.

The role emphasizes hands-on SIEM engineering, threat hunting, and playbook development, with modern tooling and a focus on reducing analyst load.

Qualifications

• 6+ years of experience in SOC, cybersecurity engineering, SIEM engineering, or ISSE.
• Experience deploying and maintaining Splunk Enterprise Security and/or other enterprise SIEM platforms.
• Strong knowledge of Windows and Linux system administration and troubleshooting.
• Experience scripting or automation using PowerShell, Python, Bash, or similar.

Responsibilities

• Design, implement, configure, and maintain SIEM, log management, and security monitoring solutions.
• Evaluate SOC architectures and recommend improvements for scalability and threat visibility.
• Engineer and optimize log collection pipelines across network, system, application, and cloud environments.
• Develop, test, tune, and maintain detection content, correlations, alerts, signatures, and analytics.
• Create and maintain SOC playbooks, SOPs, and incident response workflows.
• Support incident investigations via log analysis, endpoint analysis, malware analysis, and forensics.
• Design security automation to reduce analyst workload and improve response times.
• Develop dashboards and reports to measure SOC performance and health.
• Participate in threat hunting and malware analysis efforts as needed.

Skills

Scripting / Automation

SIEM engineering

Cloud & containers

Network security concepts

Threat detection & incident response

Stakeholder communication

Education

High School Diploma or equivalent

Bachelor's Degree in IT/Engineering/CS

Tools

Splunk Enterprise Security

SIEM platforms

Logstash

Docker

Podman

Zeek / Suricata / Elastic

VMware / Hyper-V

Cloud security basics (AWS/Azure/GCP)

Job description

Amentum is seeking a highly skilled SOC Engineer to design, deploy, and continually improve enterprise SIEM and security monitoring across classified environments. You will own log pipelines, detections, automation, incident response, and cross-team collaboration to strengthen cyber defense capabilities.

The role emphasizes hands-on SIEM engineering, threat hunting, and playbook development, with modern tooling and a focus on reducing analyst load.