SOC Engineer TS/SCI | Advanced Threat Detection

Power3 Solutions; Columbia (MD); On-site; USD 135,000 - 160,000; Full time

Benefits offered by this job

Medical Insurance

Health Savings Account (HSA)"conribut\

Company-paid Life Insurance and AD&D

Disability Insurance

20 days vacation + holidays

Pre-tax 401k with 6% company match

Job summary

Tulzi Technologies, LLC (Tulzi) is seeking a SOC Engineer for a TS/SCI cleared role in Columbia, MD. The engineer will determine SIEM needs, design and deploy systems, and develop detection methods to safeguard client environments. Ideal candidates have 2+ years in information security and may hold vendor security certifications.

Role involves hands-on work with Splunk, Logstash, and Linux/Windows platforms; strong scripting and incident response skills are beneficial. Competitive benefits apply.

Qualifications

• 2+ years of experience as information security analyst or engineer
• SOC experience is a plus
• Clearance TS/SCI required
• Vendor certifications in security (e.g., Microsoft, Cisco, Splunk, Linux) preferred

Responsibilities

• Determine log management and SIEM needs; evaluate existing systems for gaps and next-gen architecture
• Design and deploy new systems and upgrade existing ones to meet customer needs
• Identify gaps in malicious activity detection; create and tune signatures/rules to improve detection; test to reduce false positives
• Assist in incident response and forensics; develop playbooks and scripts for threat detection and automation
• Create, modify, and tune IDS signatures / SIEM correlation searches and other detection rules

Skills

Python scripting

Ansible scripting

Tools

Logstash

Podman

Docker

Splunk

Corelight

Security Onion

Windows

Red Hat Enterprise Linux

Job description

Tulzi Technologies, LLC (Tulzi) is seeking a SOC Engineer for a TS/SCI cleared role in Columbia, MD. The engineer will determine SIEM needs, design and deploy systems, and develop detection methods to safeguard client environments. Ideal candidates have 2+ years in information security and may hold vendor security certifications.

Role involves hands-on work with Splunk, Logstash, and Linux/Windows platforms; strong scripting and incident response skills are beneficial. Competitive benefits apply.