Senior SOC Engineer - SIEM & Threat Detection

Socket.dev; Columbia (MD); On-site; USD 145,000 - 190,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Educational reimbursement

Parental leave

Employee stock purchase plan

Tax-saving options

Disability and life insurance

Pet insurance

Job summary

Amentum is seeking a highly skilled SOC Engineer to design, deploy, and continuously improve enterprise security operations capabilities. You will implement SIEM, log management, and detection content while collaborating with analysts, incident responders, and system engineers in a complex environment.

The role emphasizes hands-on work, scripting, automation, and documentation to strengthen cyber defense in mission-critical environments. TS/SCI clearance is required.

Qualifications

• 6+ years of SOC/cybersecurity engineering experience.
• Experience deploying and maintaining Splunk ES or other enterprise SIEMs.
• Strong knowledge of Windows and Linux systems administration.

Responsibilities

• Design, deploy, and maintain SIEM, log management, and security monitoring.
• Develop detection content, correlations, alerts, and analytics.
• Create SOC playbooks and incident response workflows.
• Support malware analysis, forensics, and threat hunting.
• Develop automation scripts (Python/PowerShell/Bash) to improve SOC efficiency.
• Produce architecture diagrams and engineering reports.

Skills

SIEM engineering

Threat detection

Security automation

Incident response

Log management

Python

PowerShell

Bash

Windows admin

Linux admin

Threat hunting

Documentation

Education

High School Diploma or equivalent

Bachelor's Degree in IT/CS/Engineering (preferred)

Tools

Splunk Enterprise Security

SIEM platforms

Logstash

Docker

Podman

Elastic/Zeek/Suricata

VMware/ Hyper-V

Job description

Amentum is seeking a highly skilled SOC Engineer to design, deploy, and continuously improve enterprise security operations capabilities. You will implement SIEM, log management, and detection content while collaborating with analysts, incident responders, and system engineers in a complex environment.

The role emphasizes hands-on work, scripting, automation, and documentation to strengthen cyber defense in mission-critical environments. TS/SCI clearance is required.