Senior SOC Engineer — SIEM, Threat Detection, TS/SCI

Amentum; Ellicott City (MD); On-site; USD 145,000 - 190,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

Paid time off and holidays

Retirement benefits (401(k) matching)

Educational reimbursement

Parental leave

Employee stock purchase plan

Tax-saving options

Disability and life insurance

Pet insurance

Job summary

Amentum is seeking a highly skilled SOC Engineer to design, deploy, and continually improve enterprise SIEM, log management, and security monitoring capabilities. You will work with cybersecurity analysts, system administrators, and network engineers to enhance security visibility and defend mission systems.

The role emphasizes hands-on implementation of detections, automation, and incident response across classified environments, with a focus on reducing analyst workload and improving response

Qualifications

• 6+ years of experience in SOC, cybersecurity engineering, SIEM engineering, or ISSE.
• Experience deploying and maintaining Splunk Enterprise Security and/or other enterprise SIEM platforms.
• Strong knowledge of Windows and Linux operating systems and scripting (PowerShell, Python, Bash).
• Experience within classified or highly regulated environments.
• Experience producing technical documentation, architecture diagrams, and engineering reports.
• Strong communication and customer engagement skills.

Responsibilities

• Design, implement, configure, and maintain SIEM, log management, and security monitoring solutions.
• Evaluate SOC architectures and recommend improvements for scalability and threat visibility.
• Engineer and optimize log collection pipelines across network, system, application, and cloud environments.
• Develop and maintain detection content, including correlation searches and analytics.
• Create SOC playbooks, incident response workflows, and SOPs.
• Support incident investigations through log, endpoint, and malware analysis.

Skills

SIEM engineering

Threat detection

Incident response

Python

PowerShell

Bash

Log management

Threat hunting

Security automation

Documentation

Communication

Education

High School Diploma or equivalent

Bachelor's degree in IT/CS or related field

Tools

Splunk Enterprise Security

Elastic

Docker

Podman

VMware

Hyper-V

Nutanix

Logstash

Job description

Amentum is seeking a highly skilled SOC Engineer to design, deploy, and continually improve enterprise SIEM, log management, and security monitoring capabilities. You will work with cybersecurity analysts, system administrators, and network engineers to enhance security visibility and defend mission systems.

The role emphasizes hands-on implementation of detections, automation, and incident response across classified environments, with a focus on reducing analyst workload and improving response