Senior SOC Engineer — SIEM, Threat Detection, TS/SCI

Amentum; Ellicott City (MD); Presencial; USD 145.000 - 190.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health, dental, and vision insurance

Paid time off and holidays

Retirement benefits (401(k) matching)

Educational reimbursement

Parental leave

Employee stock purchase plan

Tax-saving options

Disability and life insurance

Pet insurance

Descripción de la vacante

Amentum is seeking a highly skilled SOC Engineer to design, deploy, and continually improve enterprise SIEM, log management, and security monitoring capabilities. You will work with cybersecurity analysts, system administrators, and network engineers to enhance security visibility and defend mission systems.

The role emphasizes hands-on implementation of detections, automation, and incident response across classified environments, with a focus on reducing analyst workload and improving response

Formación

• 6+ years of experience in SOC, cybersecurity engineering, SIEM engineering, or ISSE.
• Experience deploying and maintaining Splunk Enterprise Security and/or other enterprise SIEM platforms.
• Strong knowledge of Windows and Linux operating systems and scripting (PowerShell, Python, Bash).
• Experience within classified or highly regulated environments.
• Experience producing technical documentation, architecture diagrams, and engineering reports.
• Strong communication and customer engagement skills.

Responsabilidades

• Design, implement, configure, and maintain SIEM, log management, and security monitoring solutions.
• Evaluate SOC architectures and recommend improvements for scalability and threat visibility.
• Engineer and optimize log collection pipelines across network, system, application, and cloud environments.
• Develop and maintain detection content, including correlation searches and analytics.
• Create SOC playbooks, incident response workflows, and SOPs.
• Support incident investigations through log, endpoint, and malware analysis.

Conocimientos

SIEM engineering

Threat detection

Incident response

Python

PowerShell

Bash

Log management

Threat hunting

Security automation

Documentation

Communication

Educación

High School Diploma or equivalent

Bachelor's degree in IT/CS or related field

Herramientas

Splunk Enterprise Security

Elastic

Docker

Podman

VMware

Hyper-V

Nutanix

Logstash

Descripción del empleo

Amentum is seeking a highly skilled SOC Engineer to design, deploy, and continually improve enterprise SIEM, log management, and security monitoring capabilities. You will work with cybersecurity analysts, system administrators, and network engineers to enhance security visibility and defend mission systems.

The role emphasizes hands-on implementation of detections, automation, and incident response across classified environments, with a focus on reducing analyst workload and improving response