SOC Engineer -TS/SCI Security Clearance Required

Power3 Solutions; Columbia (MD); On-site; USD 135,000 - 160,000; Full time

Benefits offered by this job

Medical Insurance

Health Savings Account (HSA)"conribut\

Company-paid Life Insurance and AD&D

Disability Insurance

20 days vacation + holidays

Pre-tax 401k with 6% company match

Job summary

Tulzi Technologies, LLC (Tulzi) is seeking a SOC Engineer for a TS/SCI cleared role in Columbia, MD. The engineer will determine SIEM needs, design and deploy systems, and develop detection methods to safeguard client environments. Ideal candidates have 2+ years in information security and may hold vendor security certifications.

Role involves hands-on work with Splunk, Logstash, and Linux/Windows platforms; strong scripting and incident response skills are beneficial. Competitive benefits apply.

Qualifications

• 2+ years of experience as information security analyst or engineer
• SOC experience is a plus
• Clearance TS/SCI required
• Vendor certifications in security (e.g., Microsoft, Cisco, Splunk, Linux) preferred

Responsibilities

• Determine log management and SIEM needs; evaluate existing systems for gaps and next-gen architecture
• Design and deploy new systems and upgrade existing ones to meet customer needs
• Identify gaps in malicious activity detection; create and tune signatures/rules to improve detection; test to reduce false positives
• Assist in incident response and forensics; develop playbooks and scripts for threat detection and automation
• Create, modify, and tune IDS signatures / SIEM correlation searches and other detection rules

Skills

Python scripting

Ansible scripting

Tools

Logstash

Podman

Docker

Splunk

Corelight

Security Onion

Windows

Red Hat Enterprise Linux

Job description

SOC Engineer -TS/SCI Security Clearance Required

• Columbia, MD
• Computer/Software

Tulzi Technologies, LLC (Tulzi) prides ourselves on an open, and honest culture in the workplace which builds a morale conducive to inspiring growth on our team, while balancing lifestyle by supporting personal and family goals with flexibility. Tulzi offers secure network systems and software engineering solutions in both public and private sectors. With certified expert consulting the team at Tulzi is able to address the customers mission, and follow through in the systems development life cycle.

Clearance Required: TS/SCI

Title: SOC Engineer, Mid Level

Location: Columbia, MD

Salary Range: $135-160/yr

Minimum Years of Experience: 2+

IAT Certification Level: CASP+, CISA, CISSP, GCIH, CEH, GIAC, GCIA, CCNP-Security and CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND.

Vendor Certification Required: Microsoft, Cisco, Splunk, Linux, or any other related vendor certification

Description: The SOC Engineer works with the customer to determine log management and SIEM needs, evaluate existing systems, for improvements, gaps, and next generation architecture and design. Designs and deploys new systems and upgrades existing systems as needed to meet customer needs and protect systems from emerging threats. The SOC Engineer will identify gaps in malicious activity detection capabilities, create new signatures / rules to improve detection of malicious activity and test and tune existing signatures / rules to ensure low rate of false positives. SOC Engineer will assist in playbook development for alert triage and Incident Response. Define and implement alert and threat detection metrics, statistics, and analytics. Recommend new tools/technologies to improve network visibility. Support Incident Response and Forensic operations as required to include static/dynamic malware analysis and reverse engineering. Author and maintain scripts for threat detection and automation. Will be responsible for creating, modifying, tuning IDS signatures/SIEM Correlation Searches and/or other detection signatures.

SOC Engineer will have direct hands on experience with tools such as Logstash, Podman, Docker, Splunk, Corelight, Security Onion, Windows Operating System, and Red Hat Enterprise License.

2+ years of Experience working as an information security analyst or engineer. SOC experience is a plus

Preferred:

• Python and/or Ansible Scripting experience
• Prior military experience

We offer a competitive benefits and compensation package and FUN place to work!

Health and Wellness Benefits

• Medical Insurance (three CareFirst healthcare plans to choose from, Dental and Vision Insurance, 75% covered for employee/ 50% per dependant)
• Health Savings Account (HSA) contributions $1500 individual/ $3000 family

Personal Insurance Benefits

• Company-paid Life Insurance and AD&D coverage
• Company-paid Short-term and Long-term Disability Insurance

Vacation & Time Off

• Employees receive 20 days of vacation/10 holidays built into hourly rate/ 5 days of Administrative time (currently used for snow, jury, bereavement)

Retirement

• Pre-tax 401k program including 6% company match
• 100% fully vested from eligibility date
• *Eligible after 90 days of employment

Companyprovides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, pregnancy, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.