Senior SOC Engineer — TS/SCI Clearance, SIEM & IR Lead

HRB; Columbia (MD); Sur place; USD 155 000 - 170 000; Plein temps

Avantages offerts par ce poste

Medical Insurance

Health Savings Account

Life Insurance

Disability Insurance

Vacation and holidays

401(k) with company match

Résumé du poste

Tulzi Technologies, LLC (Tulzi) in Columbia, MD is seeking a Senior SOC Engineer with TS/SCI clearance to join our information security team. You will work with customers to determine SIEM needs, design and deploy systems, and enhance detection capabilities.

Qualified candidates have 4+ years in security engineering, hands-on work with Logstash, Docker/Splunk, and Red Hat-based systems; Python/Ansible are a plus. We offer a competitive benefits package and a dynamic, collaborative workplace.

Qualifications

• 4+ years of experience in information security analysis or engineering.
• SOC experience is a plus.
• TS/SCI clearance required or currently held.

Responsabilités

• Determine log management and SIEM needs with the customer.
• Design, deploy, and upgrade systems to meet security requirements.
• Create and tune signatures/rules; reduce false positives.
• Develop alert playbooks and incident response procedures.
• Write scripts for threat detection and automation.
• Tune IDS/SIEM signatures and searches.

Connaissances

Python scripting

Ansible

SOC monitoring

Outils

Logstash

Podman

Docker

Splunk

Corelight

Security Onion

Windows OS

RHEL

Description du poste

Tulzi Technologies, LLC (Tulzi) in Columbia, MD is seeking a Senior SOC Engineer with TS/SCI clearance to join our information security team. You will work with customers to determine SIEM needs, design and deploy systems, and enhance detection capabilities.

Qualified candidates have 4+ years in security engineering, hands-on work with Logstash, Docker/Splunk, and Red Hat-based systems; Python/Ansible are a plus. We offer a competitive benefits package and a dynamic, collaborative workplace.