Senior SOC Engineer-| TS/SCI Clearance Required

HRB; Columbia (MD); On-site; USD 155,000 - 170,000; Full time

Benefits offered by this job

Medical Insurance

Health Savings Account

Life Insurance

Disability Insurance

Vacation and holidays

401(k) with company match

Job summary

Tulzi Technologies, LLC (Tulzi) in Columbia, MD is seeking a Senior SOC Engineer with TS/SCI clearance to join our information security team. You will work with customers to determine SIEM needs, design and deploy systems, and enhance detection capabilities.

Qualified candidates have 4+ years in security engineering, hands-on work with Logstash, Docker/Splunk, and Red Hat-based systems; Python/Ansible are a plus. We offer a competitive benefits package and a dynamic, collaborative workplace.

Qualifications

• 4+ years of experience in information security analysis or engineering.
• SOC experience is a plus.
• TS/SCI clearance required or currently held.

Responsibilities

• Determine log management and SIEM needs with the customer.
• Design, deploy, and upgrade systems to meet security requirements.
• Create and tune signatures/rules; reduce false positives.
• Develop alert playbooks and incident response procedures.
• Write scripts for threat detection and automation.
• Tune IDS/SIEM signatures and searches.

Skills

Python scripting

Ansible

SOC monitoring

Tools

Logstash

Podman

Docker

Splunk

Corelight

Security Onion

Windows OS

RHEL

Job description

Senior SOC Engineer-| TS/SCI Clearance Required

• Columbia, MD
• Information Technology

Tulzi Technologies, LLC (Tulzi) prides ourselves on an open, and honest culture in the workplace which builds a morale conducive to inspiring growth on our team, while balancing lifestyle by supporting personal and family goals with flexibility. Tulzi offers secure network systems and software engineering solutions in both public and private sectors. With certified expert consulting the team at Tulzi is able to address the customers mission, and follow through in the systems development life cycle.

Clearance Required: TS/SCI
Title: SOC Engineer, Senior Level
Location: Columbia, MD
Salary Range: $155-170k/yr

Minimum Years of Experience: 4+

IAT Certification Level: CASP+, CISA, CISSP, GCIH, CEH, GIAC, GCIA, CCNP-Security and CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND.

Vendor Certification Required: Microsoft, Cisco, Splunk, Linux, or any other related vendor certification

Description:
The SOC Engineer works with the customer to determine log management and SIEM needs, evaluate existing systems, for improvements, gaps, and next generation architecture and design. Designs and deploys new systems and upgrades existing systems as needed to meet customer needs and protect systems from emerging threats. The SOC Engineer will identify gaps in malicious activity detection capabilities, create new signatures / rules to improve detection of malicious activity and test and tune existing signatures / rules to ensure low rate of false positives. SOC Engineer will assist in playbook development for alert triage and Incident Response. Define and implement alert and threat detection metrics, statistics, and analytics. Recommend new tools/technologies to improve network visibility. Support Incident Response and Forensic operations as required to include static/dynamic malware analysis and reverse engineering. Author and maintain scripts for threat detection and automation. Will be responsible for creating, modifying, tuning IDS signatures/SIEM Correlation Searches and/or other detection signatures.

SOC Engineer will have direct hands on experience with tools such as Logstash, Podman, Docker, Splunk, Corelight, Security Onion, Windows Operating System, and Red Hat Enterprise License.

4+ years of Experience working as an information security analyst or engineer. SOC experience is a plus

Preferred:

• Python and/or Ansible Scripting experience
• Prior military experience

We offer a competitive benefits and compensation package and FUN place to work! Benefits include, but not limited to:

Health and Wellness Benefits

• Medical Insurance (three CareFirst healthcare plans to choose from, Dental and Vision Insurance, 75% covered for employee/ 50% per dependant)
• Health Savings Account (HSA) contributions $1500 individual/ $3000 family

Personal Insurance Benefits

• Company-paid Life Insurance and AD&D coverage
• Company-paid Short-term and Long-term Disability Insurance

Paid Leave

• Employees receive 20 days of vacation/10 holidays built into hourly rate/ 5 days of Administrativetime (currently used for snow, jury, bereavement)

Retirement

• Pre-tax 401k program including 6% company match
• 100% fully vested from eligibility date

*Eligible after 90 days of employment

Tulzi Technologies provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, pregnancy, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.