SOC Engineer

cillium corp; Baltimore (MD); On-site; USD 75,000 - 100,000; Full time

Job summary

cillium corp is seeking an information security analyst to work with clients on log management and SIEM needs. The role involves evaluating existing systems, developing plans to fulfill client requirements, and deploying new systems. The ideal candidate will possess 3+ years of experience in the field and knowledge of current information security threats.

Travel up to 75% of the time may be required. Join a dynamic team where your expertise can make a significant impact on client security strategies.

Qualifications

• 3+ years of experience as an information security analyst or engineer.
• Knowledge of log management and SIEM tools usage and architecture.
• Ability to explain current information security threats including malware and phishing.

Responsibilities

• Work with clients to determine log management and SIEM needs.
• Evaluate and develop plans to fulfill client's needs with available resources.
• Interact with client's security analysts, engineers, and data source owners.

Skills

Information security analysis

Log management tools

SIEM tools usage

Explaining security threats

Use case development

Job description

Work with clients to determine log management and SIEM needs, evaluate the client's existing systems, if any, develop a plan to fulfill the client's needs with available resources, and execute the plan. Evaluate log and SIEM needs, including the development of use cases to address specific risks faced by the client, taking into consideration potential data sources in the client's environment. Fulfill the client's needs, deploy new systems, migrate to different systems, upgrade existing systems, or create content for systems in place. Interact with the client's security analysts, engineers, and data source owners. Work individually, in small teams of 2 to 4 people, or in larger teams of 5 to 10 people, depending on the needs of the client.

Qualifications

• 3+ years of experience as an information security analyst or engineer
• Knowledge of log management and SIEM tools usage and architecture
• Ability to explain current information security threats, including DDoS, botnets, malware, Advanced Persistent Threats (APT), buffer overflows, SQL injection, and phishing
• Ability to develop use cases for detecting malicious and suspicious activity
• Ability to travel up to 75% of the time

Additional Information

All your information will be kept confidential according to EEO guidelines.