SOC Engineer

SAIC; Georgia (VT); Remote; USD 120,000 - 160,000; Full time

Job summary

Join a leading technology integrator as a Cyber Engineer Sr. in a dynamic Security Operations Center. This remote role offers the chance to work with cutting-edge cloud and data center technologies while ensuring robust cybersecurity measures. You will be responsible for monitoring security alerts, documenting incidents, and collaborating with teams to enhance SOC processes. With a focus on innovation and technology, this position not only promises professional growth but also the opportunity to contribute to critical national imperatives. If you are passionate about cybersecurity and eager to learn, this is the perfect opportunity to make a significant impact in a supportive and inclusive environment.

Qualifications

• Bachelor's degree with 6+ years of experience in Cybersecurity.
• Experience with SIEM and SOAR tools, particularly Splunk.

Responsibilities

• Monitor and enhance operations in Cloud and data center environments.
• Document security alerts and provide monitoring across environments.

Skills

Cybersecurity

Scripting (Python)

Cloud Architecture

Incident Response

Threat Hunting

Data Extraction

Security Monitoring

Documentation

Collaboration

Education

Bachelor's Degree

Tools

Splunk

AWS

Azure

SOAR tools

OpenSearch

Job description

SAIC is seeking a Cyber Engineer Sr. who will be a key member of a fast-paced Security Operations Center, monitoring and enhancing operations for both Cloud and data center environments.

This is a remote position. The work location can be anywhere in the US.

Position Responsibilities:

1. Working across multi-cloud (AWS Commercial, GovCloud, and Azure for Government) and data center environments to extract data from tools such as Splunk, or OpenSearch.
2. Understanding and familiarity with cloud architectures (e.g., SaaS, PaaS), cloud systems (AWS, Azure), and security solutions.
3. Familiarity with common cyber security technical controls and their application to cloud and on-prem systems, such as access control, audit and accountability, configuration management, identification and authentication, system and communication protection, and system and information integrity.
4. Understanding of US Government cyber security standards and methodologies including FISMA, the NIST Cyber Security Framework, NIST 800-37 Risk Management Framework, NIST 800-53 Cyber Security Controls, and the Federal Risk and Authorization Management Program (FedRAMP).
5. Provide security monitoring and response to alerts across both Cloud and data center environments.
6. Responsible for accurately documenting security alerts (both routine and unusual).
7. Familiarity with SIEM tools such as Splunk.
8. Ability to aggregate various log data sources to assess and triage security incidents.
9. Liaison in an Enterprise environment with security staff and application development teams.
10. Identify and collaborate with team to automate process enhancements of current SOC processes.
11. Familiarity with attacker tactics and frameworks such as the MITRE ATT&CK framework.
12. Experience with hands on participation in threat hunting on either red and/or blue teams.
13. Actively monitor and maintain event and incident tickets.
14. Follow incident response process and actively involved with actionable improvement recommendations.
15. Experience scripting and automating using API calls - Python preferred.
16. Works well with peers to build strong relationships with delivery and customer teams across organizational boundaries.
17. Current or prior work experience at the Centers for Medicare and Medicaid Services (CMS) and in particularly the Office of Information Technology / Infrastructure and User Services Group (OIT / IUSG).
18. Desire to learn new skills, new client environments, new tools and new domain expertise quickly and eagerly.

Qualifications:

Requirements:

1. Bachelors degree and six (6) years or more experience. Four years of experience may be considered in lieu of a degree.
2. At least 5 years of Cybersecurity experience.
3. Experience with SIEM tools (Such as Splunk, Snowflake, Panther.io and ELK stacks).
4. Experience with SOAR tools (Such as Splunk Phantom or Swimlane).
5. Adept at scripting automations and data extraction using Python.
6. Experience as a prior SOC engineer.
7. Must have resided in the US at least 3 of the last 5 years with the ability to obtain a public trust clearance.

Target Salary Range: $120,001 - $160,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.

SAIC accepts applications on an ongoing basis and there is no deadline.

Covid Policy: SAIC does not require COVID-19 vaccinations or boosters. Customer site vaccination requirements must be followed when work is performed at a customer site.

Overview:

SAIC is a premier Fortune 500 technology integrator focused on advancing the power of technology and innovation to serve and protect our world. Our robust portfolio of offerings across the defense, space, civilian and intelligence markets includes secure high-end solutions in mission IT, enterprise IT, engineering services and professional services. We integrate emerging technology, rapidly and securely, into mission critical operations that modernize and enable critical national imperatives.

We are approximately 24,000 strong; driven by mission, united by purpose, and inspired by opportunities. SAIC is an Equal Opportunity Employer, fostering a culture of diversity, equity and inclusion, which is core to our values and important to attract and retain exceptional talent. Headquartered in Reston, Virginia, SAIC has annual revenues of approximately $7.4 billion. For more information, visit saic.com. For ongoing news, please visit our newsroom.

Please apply through the internal career site here >